Privacy Policy

1. Information We Collect

Information You Provide to Us

We may collect information you provide directly when you create an account, subscribe to a creator, update your profile, or communicate with us. This includes:

• Name, email address, and phone number
• Account credentials
• Payment and billing information (processed securely by Stripe, our payment processor)
• Profile information such as display name, bio, and profile photo
• Messages and content you send or receive through the Service
• Identity verification documents (for Creators, including age verification)
• Any other information you choose to provide

Information Collected Automatically

When you access or use the Service, we may automatically collect certain information, including:

• Device information (device type, operating system, unique device identifiers)
• Log and usage data (pages visited, features used, timestamps, referring URLs)
• IP address and approximate geographic location
• Browser type and version
• Message metadata (timestamps, delivery status) but not message content for analytics
• Cookies and similar tracking technologies (see Section 5)

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service
• To process transactions and send related information, including purchase confirmations and invoices
• To facilitate SMS and messaging communication between Creators and Fans
• To verify identity and age for Creator accounts
• To send transactional communications (account confirmations, security alerts, support messages)
• To detect, prevent, and address fraud, abuse, and technical issues
• To monitor and analyze usage trends and preferences to improve the Service
• To comply with applicable legal obligations
• To respond to your comments, questions, and customer service requests
• To enforce our Terms of Service and other agreements

3. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (see Section 4)
• Creator-Fan Relationships: Limited information is shared between Creators and Fans to facilitate communication. Fan phone numbers are partially masked — only the area code and geographic region are visible to Creator and Employee accounts. Full phone numbers are accessible only to Management accounts.
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Protection: To protect the rights, privacy, safety, or property of TXTBOO, our users, or the public
• Business Transfers: In connection with any merger, acquisition, reorganization, or sale of assets
• With Your Consent: When you have given us explicit permission to share your information

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not sell your personal information to third parties.

4. Third-Party Service Providers

We work with the following third-party service providers to operate the Service:

• Stripe — Payment processing and merchant of record. Stripe processes all transactions and handles payment data in accordance with PCI DSS standards. We do not store credit card numbers or bank account details on our servers.
• SMS Gateway — SMS and messaging delivery. Phone numbers and message content are transmitted through SMS Gateway to deliver messages between Creators and Fans.
• Supabase — Database hosting and authentication services. User data is stored securely with row-level security policies.
• Vercel — Web application hosting and content delivery.
• Amazon Web Services (AWS) — Cloud infrastructure, file storage, and content delivery.

Each of these providers is contractually obligated to protect your data and may only use it to perform the services we have engaged them to provide.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Service. The types of cookies we use include:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Service. This data is collected in aggregate and anonymized.

We do not use advertising or behavioral tracking cookies. Most web browsers are set to accept cookies by default. You can adjust your browser settings to remove or reject cookies, but this may affect your ability to use certain features of the Service.

6. Links to Other Websites

The Service may contain links to third-party websites or services that are not owned or controlled by TXTBOO. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of every site you visit.

7. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18 without verification of parental consent, we will take steps to delete that information. If you believe we might have any information from or about a child under 18, please contact us at support@txtboo.com.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Message content is retained for the duration of the Creator-Fan relationship. After account deletion, we may retain certain information as required by law or for legitimate business purposes, such as fraud prevention and legal compliance. Anonymized or aggregated data that can no longer be associated with an individual may be retained indefinitely. You may request deletion of your account and associated data at any time by contacting us at support@txtboo.com.

9. Data Security

We implement commercially reasonable security measures to protect your personal information, including encryption in transit (TLS/SSL), encrypted data storage, row-level security policies, secure access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where we and our service providers operate. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

11. Your Choices

You have the following choices regarding your information:

• Account Information: You may update or correct your account information at any time through your account settings.
• Communications: You may opt out of promotional communications by following the unsubscribe link in any email. You cannot opt out of transactional communications related to your account or the Service.
• SMS Messages: You may opt out of SMS messages at any time by replying STOP to any message. Standard message and data rates may apply.
• Cookies: You can adjust your browser settings to refuse cookies, though this may limit functionality.
• Account Deletion: You may request deletion of your account by contacting us at support@txtboo.com.

12. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email, in-app notification, or by posting the updated policy on our website with a revised "Last updated" date. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

TXTBOO
Email: support@txtboo.com

14. State-Specific Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of your sensitive personal information.

To submit a request, email us at support@txtboo.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

Nevada Residents

Nevada residents may opt out of the sale of certain personal information. We do not currently sell personal information as defined under Nevada law. If you have questions, contact us at support@txtboo.com.

Virginia Residents (VCDPA)

If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act:

• Right to access, correct, and delete your personal data
• Right to data portability
• Right to opt out of the processing of personal data for targeted advertising, sale, or profiling
• Right to appeal a denial of a privacy request

Colorado Residents (CPA)

If you are a Colorado resident, you have the following rights under the Colorado Privacy Act:

• Right to access, correct, and delete your personal data
• Right to data portability
• Right to opt out of targeted advertising, sale of personal data, or profiling

Connecticut Residents (CTDPA)

If you are a Connecticut resident, you have the following rights under the Connecticut Data Privacy Act:

• Right to access, correct, and delete your personal data
• Right to data portability
• Right to opt out of the processing of personal data for targeted advertising, sale, or profiling

Utah Residents (UCPA)

If you are a Utah resident, you have the following rights under the Utah Consumer Privacy Act:

• Right to access and delete your personal data
• Right to data portability
• Right to opt out of the sale of personal data or targeted advertising

To exercise any of the above state-specific rights, please contact us at support@txtboo.com. We will respond to your request within the timeframe required by applicable law.