Privacy Policy
Last updated: [DATE]
1. Introduction
This Privacy Policy explains how [COMPANY NAME] (“we,” “us”) collects, uses, shares, and protects personal information in connection with our business text-messaging platform, website, and related services (the “Service”). It applies to visitors to our website, our business customers and their authorized users (“Customers”), and it describes how we handle the contact information Customers upload about their own subscribers (“End Users”). By using the Service, you agree to this Policy.
2. Information We Collect
- Account and business information: name, email address, phone number, company name, and business-verification details (such as legal entity name, EIN, address, and website) required for carrier and 10DLC registration.
- Billing information: payment card details and billing address, processed by our payment processor; we do not store full card numbers.
- Customer Data: contact lists, phone numbers, names, custom fields, and message content that Customers upload or generate while using the Service. We process this information on behalf of and at the direction of our Customers.
- Communications data: messages sent and received through the Service, delivery status, carrier metadata, and opt-in/opt-out records.
- Usage and device information: log data, IP address, browser type, pages viewed, and similar analytics information collected via cookies and similar technologies.
- Support communications: information you provide when you contact us.
3. How We Use Information
We use the information described above to:
- Provide, operate, secure, and improve the Service, including transmitting messages to carriers for delivery;
- Complete carrier, brand, and campaign registrations required for message delivery;
- Process payments, manage accounts, and provide customer support;
- Monitor for spam, fraud, abuse, and violations of our Terms of Service and carrier requirements;
- Communicate with Customers about the Service, including service announcements and, with consent where required, marketing about our own products; and
- Comply with legal obligations and enforce our agreements.
4. Text Messaging Opt-In Data
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Text messaging originator opt-in data and consent will not be shared with, or sold to, any third parties. Information sharing described elsewhere in this Policy excludes text messaging opt-in data and consent; that information is used solely to deliver the messages the End User has consented to receive and to honor opt-out requests.
6. End User Contact Data — Our Role as Processor
Customers control the contact lists and message content they upload. For that data, the Customer is the data controller and we act as a processor/service provider: we use End User data only to provide the Service to the Customer, honor opt-outs, comply with law, and maintain security — never for our own marketing. End Users who wish to access, correct, or delete their information, or to stop receiving messages from a Customer, should reply STOP to that Customer's messages or contact the Customer directly; we will assist our Customers in fulfilling such requests.
8. Data Retention
We retain account information for as long as the account is active and as needed for legitimate business purposes. Opt-in and opt-out records are retained as required to demonstrate compliance (generally at least four years, consistent with TCPA record-keeping practice). Message logs and Customer Data are retained for the duration of the subscription and for [30] days thereafter to permit export, after which they are deleted or de-identified, except where longer retention is required by law.
9. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. No system is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you as required by applicable law.
10. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to opt out of marketing communications. California residents have rights under the CCPA/CPRA, including the rights to know, delete, correct, and to opt out of “sale” or “sharing” (we do not sell or share personal information as those terms are defined). Residents of the EEA and UK may have rights under the GDPR, including the right to lodge a complaint with a supervisory authority. To exercise rights, contact us at [CONTACT EMAIL]; we will verify your request and respond within the time required by law. We will not discriminate against you for exercising your rights.
11. Children's Privacy
The Service is intended for business use by adults. We do not knowingly collect personal information from children under 13 (or the higher age required by local law). If you believe a child has provided us personal information, contact us and we will delete it.
12. International Users
We are based in the United States and process information in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses.
13. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a revised “Last Updated” date and, for material changes, provide notice by email or through the Service.
14. Contact Us
Questions or requests regarding this Policy may be directed to: [COMPANY NAME], [MAILING ADDRESS], [CONTACT EMAIL].