Terms of Service

These Terms of Service govern the use of the iSend platform and its services.

1. Acceptance of Terms

By using our services, you fully accept these Terms of Service. If you do not agree, please do not use the platform.

2. Services

The iSend platform provides bulk SMS and Viber messaging services, as well as one-time passwords (OTP), to recipients in Greece. Service availability depends on your subscription plan.

3. User Obligations

As a user of the platform, you agree to:

  • Use the platform in accordance with applicable laws.
  • Not send unsolicited messages (spam).
  • Import only recipients for whom you have a lawful basis of communication, in accordance with Article 4 of these Terms.
  • Keep your access credentials secure.
  • Respect the rights of message recipients.

4. Recipient Personal Data — Consent & Responsibility

For the personal data of recipients (indicatively: mobile phone number, full name, email address, custom fields) that you import, upload or transmit to the platform by any means (file import, paste, manual entry, API, subscription forms), you act as the Data Controller within the meaning of Article 4(7) of Regulation (EU) 2016/679 (GDPR) and iSend acts as the Data Processor (Article 4(8) GDPR). By using the platform, you represent and warrant that:

  • For every recipient you import you hold, prior to the import, a lawful basis of communication for direct marketing purposes: either the recipient's prior consent (Articles 4 and 7 GDPR, Article 11(1) of Greek Law 3471/2006), or an existing customer relationship (Article 11(3) of Greek Law 3471/2006), i.e. contact details lawfully obtained in the context of a sale of your products or services and used to promote your own similar products or services, with an opt-out option provided both at collection and in every message.
  • The lawful-basis declaration you confirm when importing contacts is recorded by the platform (timestamp, declared source, acting user) and constitutes your binding representation. Importing contacts via the API constitutes the same declaration by the holder of the API key.
  • You keep evidence of the lawful basis for each recipient (indicatively: time-stamped consent records, proof of a transactional relationship) for as long as you use the platform and for five (5) years thereafter, and you provide it within five (5) business days upon request, in particular in the event of a recipient complaint or an inquiry by a supervisory authority (HDPA, EETT).
  • You do not re-import and do not attempt to re-activate recipients who have objected (STOP, unsubscribe, blacklist), except with their new, documented consent. The platform does not automatically re-subscribe unsubscribed recipients during imports and includes unsubscribe mechanisms in every promotional message; circumventing them is prohibited.
  • In case of indications of a breach of this article (indicatively: recipient complaints, unusual unsubscribe or delivery-failure rates, a request by a supervisory authority), iSend may, upon notice where feasible, suspend your sendings in whole or in part, request the evidence referred to above and, upon non-compliance, terminate your account in accordance with the Termination article.
  • You shall indemnify and hold iSend harmless from any damage, expense, administrative fine or third-party claim (including recipients and supervisory authorities) arising from a breach of the above representations and warranties, to the extent the damage is not attributable to iSend's own fault. The allocation of liability between controller and processor under Article 82 GDPR remains unaffected.

5. Data Processing by iSend (GDPR)

iSend processes your recipients' data exclusively to provide the messaging service (SMS, Viber, one-time passwords — OTP), based on your documented instructions (use of the platform features and the API) and in accordance with Article 28 GDPR. In particular:

  • We do not use your recipients' data for our own purposes, do not trade in it and do not make it available to third parties, other than the sub-processors required to deliver the messages: licensed message delivery providers operating lawfully in Greece (their details are available upon request) and hosting infrastructure providers within the EEA (Leaseweb). Data is stored and processed within the EEA.
  • We apply appropriate technical and organisational security measures: encryption in transit (TLS/HTTPS), individual accounts with roles, granular permissions and optional two-factor authentication (2FA), logical separation of data per customer, and audit logging of contact imports and consent changes.
  • We keep, per contact, the status, source and timestamp of consent, and we honour unsubscribes automatically and permanently (unsubscribe link in promotional messages, stop words, blacklist of blocked numbers).
  • Uploaded import files are automatically deleted within 48 hours of import completion. In delivery reports, message content is deleted after 30 days and sender and recipient numbers are anonymised after 12 months; anonymised delivery records are kept in archive for up to 5 years for statistical purposes and complaint handling. Tax and invoicing records are retained for 10 years. Following an account deletion request and the lapse of 30 days, contacts and related personal data are deleted and account details are anonymised, except for what the law requires to be retained, including unsubscribe records needed to permanently honour recipients' objections.
  • We assist you in fulfilling data subjects' rights (access, rectification, erasure, objection, restriction, portability) primarily through the platform's built-in features (viewing, exporting, correcting and deleting contacts, per-contact consent history). Requests received by us directly from data subjects are forwarded to you without undue delay, without prejudice to our own legal obligations (e.g. immediate cessation of sendings upon STOP).
  • In the event of a personal data breach concerning your data, we notify you without undue delay, providing the information of Article 33(3) GDPR to the extent available.

6. Content Inspection & Abuse Prevention

iSend reserves the right to inspect the content of messages sent through the platform for the purposes of preventing spam and abuse, ensuring compliance with applicable telecommunications regulations (including EETT requirements), protecting the reputation of shared sender IDs and routes, and verifying compliance with these Terms of Service. All content inspections are performed by authorized personnel only, are recorded in a tamper-evident audit log together with the reason and the identity of the inspecting administrator, and are limited to the minimum scope necessary to investigate the suspected issue. We will not access, share, or use customer message content for any purpose other than abuse prevention, legal compliance, or troubleshooting requested by the customer.

7. Limitation of Liability

The platform is provided "as is". We are not liable for any damages arising from the use or inability to use our services.

8. Plans and payments

The following terms apply to SMS plans, add-on SMS, credit balance and payments.

Prepayment. Plans are prepaid for the duration you choose, from one to twelve months, at the same monthly price. Plan SMS are credited every month. SMS not used within the month remain valid for thirty more days and are then removed. Amounts you have paid are not refunded, neither for unused SMS nor for the remaining duration if you cancel.

Add-on SMS. SMS you buy as add-ons, outside a plan, are valid for twelve months from purchase and are used after the plan SMS run out.

Credit balance. Every payment is a prepayment for the service, invoiced at the time of payment with VAT remitted. Amounts resulting from a plan change or order cancellation remain as credit balance in your account and are applied automatically to your next purchase. The balance can only be used for purchases, cannot be transferred to another account and is not refunded in cash.

Trial period. If we give you a trial plan, it is free of charge for the period and the SMS stated on it. When it ends, sending stops and the account stays open read-only. To continue, choose a plan from the Billing page. Unused trial SMS carry over to your plan only if you choose it within thirty days of the end of the trial. After that, your account is cancelled. Contact us to restore the account.

Expiry and grace. If your plan is not renewed at its end, sending stops and the account stays open read-only. You can renew during the grace period from the Billing page and sending resumes immediately. Unused plan SMS are valid until the end of the current period and carry over to the next period only if you renew within thirty days of expiry. The account stays open for fourteen days, or thirty days if you have unused SMS. After that, your account is cancelled and the plan SMS are removed. Contact us to restore the account.

Auto-renewal with a card. If you add a card for auto-renewal, you authorise us to charge the card at the end of each period with the renewal amount of your plan that is not covered by your credit balance, plus VAT. Card details are stored by the payment provider (Stripe), not by us. You can remove the card or turn off auto-renewal at any time from the Billing page, effective for future charges. If a charge fails, we will notify you and retry up to two more times within five days.

Chargebacks. If you dispute a charge with your bank (chargeback) instead of contacting us first, your account is suspended until the matter is settled, and the SMS or balance corresponding to the charge are removed.

9. Termination

We reserve the right to terminate or suspend your account in case of violation of these Terms.

10. Contact

For any questions regarding our Terms of Service, please contact us at