Privacy Policy

1. Overview

Texta is a tool, not a data business. We collect information about you (the account holder) to operate your account and bill you correctly. We store the contact data you upload so we can send messages on your behalf. That is the extent of it.

2. What We Collect

Account information

When you create a Texta account, we collect:

• Your name and email address (via Clerk authentication)
• Your business name
• Payment information — processed and stored by Stripe, not by Texta directly
• 10DLC registration information you submit (business name, EIN, website, use case)
• Your account brand color and logo if you upload one

Usage information

We automatically collect information about how you use the Service, including:

• Messages sent, delivery status, and segment counts
• Credit balance and transaction history
• Inbound replies and opt-out events
• URL click tracking for links shortened using go.texta.me
• Login events and session activity via Clerk

Contact data you upload

We store the contact information you import or add to your account, including names, phone numbers, email addresses, tags, and other fields you provide. See Section 4 for how we handle this data.

3. How We Use Your Information

We use the information we collect to:

• Operate your account and provide the Service
• Send SMS and MMS messages on your behalf via Telnyx
• Process payments and manage your credit balance via Stripe
• Provision and manage your dedicated phone number via Telnyx
• Submit your 10DLC brand and campaign registration on your behalf
• Send transactional emails such as billing receipts and reply notifications via Resend
• Detect and enforce opt-out requests from your contacts
• Troubleshoot issues and improve the reliability of the Service
• Comply with legal obligations

We do not use your data to train AI models. We do not use your contact lists for any purpose other than sending messages you initiate. We do not show you ads and we do not sell your data to anyone.

4. Your Contact Data

The contacts you add to Texta belong to you. We store them in your account so you can send campaigns, manage opt-outs, and track replies. We do not access your contact lists for any purpose other than executing the messages you send.

You are solely responsible for ensuring that you have lawfully obtained your contact list and that every person on it has consented to receive messages from you. Texta does not verify consent on your behalf. See the Terms of Service for your full obligations under applicable law.

When you delete your account, we delete your contact data. When a contact opts out via STOP reply, we mark them as opted out in your account and stop sending them messages. We retain the opt-out record to prevent accidental re-messaging.

5. How We Share Information

We do not sell your information. We share it only in the following limited circumstances:

Service providers

We share data with third-party providers who help us operate the Service:

• Telnyx — receives phone numbers and message content to transmit your SMS and MMS messages and to provision your dedicated number
• Stripe — receives payment information to process subscriptions and credit purchases
• Clerk — manages authentication and user accounts
• Supabase — hosts your account data and contact database
• Cloudflare — hosts the application, worker functions, and MMS image storage
• Resend — delivers transactional email notifications

Each of these providers processes your data only as necessary to deliver their service and is subject to their own privacy policies.

Legal requirements

We may disclose information if required to do so by law, court order, or a valid government request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Texta, our users, or the public.

Business transfers

If Texta is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you by email if this occurs.

6. Data Retention

We retain your account information and contact data for as long as your account is active. If you cancel your account and request deletion, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or enforcing our Terms.

Message send history and credit transaction records may be retained for up to 3 years for financial and compliance purposes.

MMS images uploaded for campaigns are automatically deleted after 7 days. After that point we cannot retrieve them.

7. Security

We take reasonable measures to protect your information, including:

• All data transmitted between your browser and our servers uses HTTPS encryption
• Your database is secured with row-level security policies — your data is scoped to your account only
• API keys and service credentials are stored as encrypted secrets, not in code
• Payment data is handled entirely by Stripe and never touches our servers in raw form

No system is completely secure. We cannot guarantee the absolute security of your data, and we encourage you to use a strong password and keep your account credentials confidential.

8. Your Rights

You have the right to access, correct, or delete your personal information. To do any of the following, contact us at ops@texta.me:

• Request a copy of the personal information we hold about you
• Correct inaccurate information in your account
• Request deletion of your account and associated data
• Ask questions about how your data is used

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request that we delete it. Contact us at ops@texta.me to exercise these rights.

We do not discriminate against users who exercise their privacy rights.

9. Cookies and Tracking

The Texta app uses cookies and local storage to manage your login session via Clerk. These are necessary for the app to function and cannot be disabled while using the Service.

The Texta marketing site (texta.me) does not use advertising cookies or third-party tracking. We do not use Google Analytics or any similar analytics service.

Links shortened via go.texta.me track click counts so you can see how many recipients clicked a link in a campaign. Click data is aggregated at the campaign level and associated with your account. We do not track individual recipients across campaigns.

10. Children

Texta is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at ops@texta.me and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this document and may notify you by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at ops@texta.me. We will respond within a reasonable time.

Texta is operated by Richter10.2 Media Group, State of Florida.