Privacy Policy - Global Edition

How AI SMS Forwarder handles your data outside India

Effective date: 10th Sep, 2025

One policy, three places your message can go: your phone, our servers for a few hours, or straight to the destination you configured. This document tells you which is which.

Publisher AI Future Gen Pvt Ltd App AI SMS Forwarder (Global) Package com.aigen.smsforwarderglobal Coverage All countries except India

Every setting in this app ultimately routes a message down one of three paths:

1 · Stays put

On your device

Read, matched against your rules, shown in the app. Never leaves the phone unless a rule below sends it on.

2 · Brief stop

Our servers

Only for email forwarding and backend AI voice - held in transit, deleted within 24 hours.

3 · Straight through

Your endpoint

Webhook and WebSocket forwarding - leaves your phone and goes directly to the URL you configured. We never see it.

Who this covers

This policy applies to AI SMS Forwarder (Global), package com.aigen.smsforwarderglobal, published by AI Future Gen Pvt Ltd for users everywhere except India, who are covered by a separate policy for our India-specific edition. It covers the Android app, our website, and the backend services the app talks to.

The global edition doesn't recognise SMS by bank name - it reads amounts and currencies generically, in whichever of the app's eight languages your message is written in, rather than matching a fixed list of banks. That distinction matters for this policy too: we describe what the app actually does for you, not a translated copy of a policy written for a different market.

What we collect, and where it goes

Grouped by the three paths above, so you can see exactly what happens to a message before you set up a rule.

On-device only

  • The sender, body, and timestamp of incoming SMS, for as long as your Android SMS provider keeps it (or until you delete it in-app)
  • Forwarding destinations you configure - phone numbers, email addresses, webhook URLs
  • Voice recordings, only if you use on-device transcription for AI voice rules - processed locally, never uploaded
  • Your OpenAI API key, if you supply your own - stored encrypted, on-device
  • Contact lookups for display names - read locally to label conversations, not stored by us

Sent to our servers

  • Email-forwarding content - routed through our SMTP relay, held in transit only
  • Voice recordings, only if you choose backend AI transcription instead of on-device
  • Wallet and billing records - for the AI voice/backend features that carry a cost
  • Account identifiers - your email, a device ID, app version
  • Crash logs and diagnostics
  • A push-notification token (Firebase Cloud Messaging), used to notify you about wallet top-ups and account status

Direct to your endpoint - never through us

When you set up a webhook or WebSocket rule, the app sends this payload straight from your phone to the URL you enter. It never touches our infrastructure, and we cannot see, log, or recover it after it's sent.

  • Sender address and full message body of the matched SMS
  • Your own phone number - only if you add the {in-number} placeholder to your template
  • Timestamps for received and forwarded time
  • Battery level at the moment of forwarding
  • SIM slot that received the message, on dual-SIM phones
  • App version, for compatibility
  • A one-way hash of your device's IMEI - a short, irreversible digest; your actual IMEI is never included

How the app reads a message

To show balance summaries, threshold alerts, and AI filtering, the app looks for amounts and currency symbols directly in the SMS text - it does not maintain a list of supported banks. This happens on-device, using pattern matching translated across the app's supported languages, so a Riyal figure in Arabic or a Won figure in Korean is recognised the same way a Dollar figure in English is.

Supported currency symbols and codes include:

$€£¥₩฿₪₺₦₱₫ USDEURGBPAEDSARJPYAUDSGDCNY+30 more

App languages:

EnglishالعربيةEspañolFrançais中文Português한국어日本語

What we never collect

Regardless of which forwarding method you use, the app does not access:

How long we keep it

Only the "sent to our servers" category above is retained by us at all - webhook and WebSocket content is never in our custody to begin with.

Data typeRetention
Forwarded SMS / voice content passing through our servers< 24 hours
Webhook / WebSocket payloadsnot retained - never received
Billing and wallet records~7 years
Crash and diagnostic logs≤ 90 days
Support correspondence≤ 24 months
Push-notification tokenuntil you uninstall or revoke

Webhook & WebSocket: read this before you enable one

Important

This feature is built for developers - and it is a known scam target

Configuring a webhook sends your SMS content - potentially including one-time passcodes and banking alerts - straight to whatever URL is entered, with no review by us. If someone you don't personally know asked you to paste a link into this screen, stop. That is a known pattern used to intercept OTPs and banking messages, not a legitimate support request.

You are solely responsible for verifying the destination and securing the endpoint you point it at. We cannot see, filter, or recover data sent this way, and we're not able to reverse a forward once it has left your device.

The same caution applies to phone-number and email forwarding: if you configure the wrong recipient, your messages - OTPs included - go to them, not us. Double-check every destination before you save a rule.

Who else sees it

Data that reaches our servers (the amber category above) may be shared with:

We do not sell your data. We have no visibility into, and no control over, whatever you send to a phone number, email address, or webhook endpoint you configure - that exchange is between you and the destination you chose.

Where processing happens

Our backend is operated primarily from India. Data may transit through infrastructure partners located in the EU or US. Where required, transfers rely on Standard Contractual Clauses or the equivalent UK Addendum.

Your rights, by region

Open the section that matches where you live.

European Union & United Kingdom - GDPR

You may request access to, correction of, or erasure of your data; restrict or object to processing; request portability of data you provided; and lodge a complaint with your local supervisory authority.

United States - CCPA / CPRA

You may request to know what we hold, request deletion, request correction, opt out of any sale or sharing of personal information (we do not sell data), limit use of sensitive personal information, and exercise these rights without discrimination.

Canada - PIPEDA

You may access and correct your personal information, withdraw consent to its use where consent was the basis for collection, and complain to the Office of the Privacy Commissioner of Canada.

Brazil - LGPD

You may request confirmation that processing exists, access, correction, anonymisation, portability, deletion, and may complain to the ANPD.

Japan, South Korea, China & Southeast Asia - APPI / PIPA / PIPL / PDPA

Statutory rights under each jurisdiction's own personal-data-protection law apply, generally covering access, correction, deletion, and consent withdrawal - reach out via the contact details below and we'll route your request to the correct process.

South Africa - POPIA

You may access and correct your personal information and object to processing on reasonable grounds.

Latin America - ARCO rights

Access, Rectification, Cancellation, and Opposition rights apply as recognised under the applicable national data-protection law.

Australia & New Zealand - Privacy Act

You may access and correct your personal information and lodge a complaint with the relevant Privacy Commissioner.

UAE & Saudi Arabia - national PDPLs

Rights to access, correction, and erasure apply as recognised under the applicable national personal-data-protection law.

Children's privacy

This app is not directed at anyone under 16, or the digital-consent age set by your local law if higher. We do not knowingly collect data from children.

Security

No system is perfectly secure. These are the safeguards we maintain - not a guarantee against every possible compromise.

Changes to this policy

We may update this policy as the app changes or as law requires. Material changes will be announced in-app or by email before they take effect.

Contact & account deletion

Questions, data requests, or account deletion: contact@toolsforoffice.com, or toolsforoffice.com. Account deletion is also available directly in Settings → Delete Account inside the app.

Governing law

This policy is governed by the laws of India, where AI Future Gen Pvt Ltd is incorporated, without prejudice to any mandatory protections you're entitled to under the law of your own country.