Legal notice, terms of service and privacy
Last updated 19 September 2026. This page applies to notifpool.com, api.notifpool.com and the NotifPool dashboard.
1. Legal notice
NotifPool is a service published and operated by:
- Company
- SpeedParts SRL (private limited company under Belgian law)
- Registered office
- Rue de Birmingham 56, 1080 Molenbeek-Saint-Jean (Brussels), Belgium
- Company number / VAT
- BE 1028.882.067 (Crossroads Bank for Enterprises, Brussels register)
- Contact
- [email protected]
- Hosting
- Amazon Web Services EMEA SARL, region eu-west-1 (Ireland); DNS and edge by Cloudflare, Inc.
NotifPool is a product line of the Karraz group. It will be transferred to Karraz Technologies once that company is incorporated; customers will be informed by e-mail, and their balance, keys and data will be carried over unchanged.
2. Terms of service
2.1 Purpose
NotifPool is an application programming interface (API) and web dashboard that lets a customer send transactional e-mails and SMS to its own recipients, receive delivery events, and read back its message history. The service is intended for businesses, associations and developers acting in a professional capacity. By creating an account you confirm that you act on behalf of a business or organisation and accept these terms.
2.2 Account and keys
- An account is created with a name and an e-mail address. You are responsible for every message sent with your API keys and for keeping them secret. Revoke a key immediately if you suspect it has leaked.
- Accounts that have never paid are limited to 500 recipients per day. The limit is lifted with the first payment.
- We may suspend an account that breaches these terms, generates abnormal bounce or complaint rates, or that a carrier or provider asks us to suspend. We notify you at the account e-mail address.
2.3 Acceptable use
You may only send messages that your recipients have agreed to receive, or that they legitimately expect because of a contract or a request they made (order confirmations, one-time codes, alerts, reminders). You must not use NotifPool for:
- unsolicited marketing, purchased or scraped contact lists, or any message that breaches the Belgian Code of Economic Law, the ePrivacy rules or the GDPR;
- phishing, impersonation, fraud, threats, harassment, or content that is illegal in Belgium or in the recipient's country;
- messages that a carrier or an operator forbids on the route used (for example, links in SMS sent from the shared short number).
Every message must identify you as sender and, for marketing, offer a way to opt out. Addresses that bounce permanently or complain are added to your suppression list and are not contacted again.
2.4 Prices, credit and payment
- Prices are published on notifpool.com and via
GET /v1/prices. They are expressed in euros, excluding VAT. Belgian VAT (21 %) is added at checkout where it applies. - The service is prepaid: you buy credit, and each message is debited at the price in force when it is accepted. A message that fails before delivery is refunded to your balance.
- Payments are processed by Mollie B.V. (Netherlands). We do not see or store your card details.
- Credit is valid without time limit while the account is active. Unused credit can be refunded on request within 14 days of purchase if none of it has been used; afterwards, it is refunded only if we discontinue the service.
- Optional monthly plans lower the unit prices. They are not required to use the service.
- An invoice is issued for each payment by SpeedParts SRL and sent to the account e-mail address.
2.5 Service level and liability
- We aim at continuous availability but do not guarantee it. Delivery depends on third-party providers and carriers; a message marked
senthas been handed to them, a message markeddeliveredhas been confirmed by them. - Our liability for any claim related to the service is limited to the amount you paid us in the twelve months preceding the claim. We are not liable for indirect damage, lost revenue, or the content of your messages.
- You indemnify us against claims from your recipients or from authorities caused by your messages.
2.6 Termination
You may close your account at any time by e-mail. We may terminate the service with 30 days' notice, or immediately for breach. On closure, message history is deleted within 90 days; invoices are kept for the legal accounting period.
2.7 Changes and law
We may update these terms; material changes are announced by e-mail 15 days in advance. Belgian law applies. The courts of Brussels have jurisdiction, without prejudice to mandatory consumer rules where they apply.
3. Privacy
3.1 Two roles
- For your account data (your name, e-mail, keys, invoices, dashboard logins), SpeedParts SRL is the controller.
- For the data in the messages you send (your recipients' addresses, numbers and message content), you are the controller and SpeedParts SRL is your processor, acting only on your instructions. A data processing agreement is available on request at [email protected].
3.2 What we keep, and for how long
| Data | Purpose | Retention |
|---|---|---|
| Account name, e-mail, plan, balance | run the service, invoice you | life of the account, then invoices 7 years (accounting law) |
| Messages: recipients, subject, status, cost, provider identifiers; bodies of queued messages | deliver, report status, let you read your history | 90 days, then deleted automatically |
| Delivery and webhook events | status reporting, retries | 30 days |
| Suppression list (bounced or complaining addresses) | avoid contacting them again | until you remove them |
| Dashboard sign-ins (time, IP address, browser) | security, support | 180 days |
| API access logs | security, debugging | 30 days |
3.3 Where
All data is stored and processed in the European Union (AWS region Ireland). SMS are handed to OVHcloud (France) and, for some routes, to AWS End User Messaging (Ireland); e-mails to Amazon SES (Ireland). Cloudflare proxies the website and the API from its European edge locations. No data is transferred outside the EU except as needed by the carriers to reach a recipient located abroad.
3.4 Your rights
You can access, correct, export or delete your account data by e-mail to [email protected]; we answer within 30 days. You can lodge a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be). Recipients of your messages should address their requests to you; we help you fulfil them.
3.5 Cookies
The website uses no tracking cookie and no analytics. The dashboard sets one strictly necessary session cookie (np_session, 30 days) after you sign in. Your browser may also keep the language you chose.
4. Sub-processors
| Provider | Role | Location |
|---|---|---|
| Amazon Web Services EMEA SARL | hosting, database, queues, e-mail delivery (SES), SMS fallback | Ireland (eu-west-1) |
| OVH SAS | SMS delivery | France |
| Cloudflare, Inc. | DNS, TLS, reverse proxy | EU edge locations |
| Mollie B.V. | payment processing | Netherlands |
Changes to this list are announced by e-mail 30 days in advance.