Privacy Policy
Privacy Policy - Ultranet Global
Effective Date: October 14, 2026
Entity: Ultranet Global Communications Limited (“Company,” “we,” “us,” or “our”)
Website: https://www.ultranetgh.com
Contact Email: info@ultranetgh.com
1. Overview
Ultranet Global Communications Limited provides communication infrastructure, API platform integrations, and authentication services (CPaaS) to enterprise partners, developers, and businesses worldwide.
This Privacy Policy explains how we handle data across:
- Our Corporate Website (https://www.ultranetgh.com)
- Our CPaaS & Authentication Platform (API delivery of One-Time Passwords (OTP), Multi-Factor Authentication (MFA), and transactional notifications via WhatsApp Cloud API, SMS, and related channels).
2. Information We Process
a. Website Visitors
We operate a minimal-data website. We do not collect personal profiles, user registrations, or payment details directly through `www.ultranetgh.com` unless you explicitly contact us via provided support channels. Standard web server access logs (such as IP address, browser type, and time of request) may be temporarily logged by infrastructure providers for system security and fraud prevention.
b. CPaaS & Authentication API Platform
When our business partners utilize our CPaaS APIs to transmit authentication codes (OTPs) and security messages, we act as a Data Processor / Sub-processor. We process:
End-User Phone Numbers: Provided programmatically by our business partners solely to route verification codes or security notifications.
Transmission Telemetry Data: Message status logs (delivery success, timestamps, error codes, IP headers, and country codes) required to verify message delivery and maintain system reliability.
Billing & Account Data: Business contact information and payment credentials (processed via PCI-compliant payment gateways like Stripe) for platform subscriptions and usage charges.
Note: We do not store plain-text OTP credentials or end-user payload content beyond transient in-flight processing.
3. Purpose of Data Processing
We process telemetry and message data strictly for:
Delivering automated multi-factor authentication (MFA) and OTP verification codes requested by end-users.
Transmitting critical account security alerts and service notifications.
Generating delivery reports and maintaining technical stability for our API infrastructure.
Preventing API abuse, message flooding, rate-limit violations, and fraudulent activities.
Facilitating platform billing and usage accounting.
We do not sell, rent, trade, or monetize end-user phone numbers or payload data.
4. Third-Party Service Providers & Sub-Processors
To execute enterprise-grade global message delivery, we partner with reputable third-party infrastructure providers who process data on our behalf under strict confidentiality and encryption controls:
Meta Platforms, Inc. (WhatsApp Cloud API): To route business-initiated WhatsApp messaging and authentication templates.
Telecommunications Operators & Aggregators: Network operators worldwide required to deliver SMS and voice-based OTP notifications.
Payment Gateways (e.g., Stripe): Secure payment processors handling billing for platform services. Payment information is handled directly under PCI-DSS standards.
5. Security & Data Retention
Transient Retention: Phone numbers and verification logs are stored temporarily for audit and delivery reporting purposes before being purged in accordance with data minimization standards.
Encryption in Transit: All communications between partner servers, our CPaaS API gateway, and third-party networks occur over HTTPS/TLS 1.3 encrypted channels.
Access Controls: API access requires authenticated System User access tokens and encrypted credentials.
6. User Rights & Consent
By entering a phone number into a partner application or requesting an authentication code, end-users consent to receiving an automated message containing their code.
Depending on your region (including Ghana, Nigeria, the EEA/UK, and other jurisdictions), end-users have rights regarding their personal data, including:
The right to request information about processed data.
The right to request correction or deletion of personal data.
The right to withdraw consent for messaging services.
End-users may opt out of receiving authentication messages at any time by ceasing authentication requests or contacting their service provider.
7. Global Data Transfers
Because our services operate internationally, data may be transferred through secure routing servers and telecommunication networks across different countries. All cross-border transfers are governed by appropriate contractual safeguards to protect personal information.
8. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, API features, or infrastructure updates. Revised versions will be published on `www.ultranetgh.com` with an updated effective date.
9. Contact Us
For questions, compliance inquiries, or data protection requests, please reach out to us:
Company: Ultranet Global Communications Limited
Website: https://www.ultranetgh.com
Email: info@ultranetgh.com