Textual Privacy Policy

Last Updated: November 6, 2026

This Privacy Policy ("Policy") explains how Textual, LLC and its affiliates ("Textual," "we," "us," or "our") collect, use, and protect information about you ("personal information") in connection with our text-to-buy commerce platform, our text messaging programs, our website at https://www.textual.com, and any related products or services that link to this Policy (collectively, the "Service"). Use of the Service is also governed by our Terms of Use at https://www.textual.com/terms-of-use-and-policies.

Textual is a marketing engagement platform that operates a business-to-business-to-consumer (B2B2C) model. We are not a data broker, and we do not monetize personal information.

Our Commitment to You

We do not sell, rent, or share mobile information, personal information, or any other consumer data with third parties, affiliates, or partners for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

This commitment applies to all categories of personal information we collect, including mobile phone numbers, SMS opt-in data, message content, names, email addresses, and any other identifiers you provide to us or that our business customers provide to us on behalf of their end users.

Textual's Role: Controller vs. Processor

Textual as a Data Controller. Textual is the "data controller" of personal information collected directly through our website, our own text messaging programs, our marketing activities, and the administration of customer accounts. This Policy describes those activities.

Textual as a Data Processor. When our business customers use our platform to communicate with their own end users (for example, when a brand sends text-to-buy messages to its subscribers), Textual acts as a "data processor" or "service provider." We process that data only on behalf of, and under the documented instructions of, our customer, who is the data controller. For that processing, please also consult the privacy policy of the brand that sent you the message.

1. Information We Collect

Information You Provide Directly

• Account and contact information: name, email address, password, company name, company URL, business phone, business address, job title, and similar information you provide when registering for an account, requesting a demo, or contacting us.
• Mobile information and SMS opt-in data: mobile phone number and the consent record (date, time, source, and language of opt-in) when you sign up to receive text messages from us or from a Textual customer through our platform.
• Message content: the text of messages you send to or receive from us, and (in our processor capacity) messages exchanged between our customers and their subscribers through the platform.
• Transaction information: records of services or products purchased, ordered, or considered, and limited payment information. Card details are entered directly into our third-party payment processor; we receive only the last four digits, card brand, and transaction metadata.
• Communications: information you provide when you contact support, request a demo, complete a form, or respond to a survey.
• Log data: IP address, browser type and version, operating system, device type, referring URL, and timestamps.
• Usage data: pages viewed, features used, links clicked, campaign performance metrics, and similar interaction data.
• Approximate location: general geographic region inferred from IP address. We do not collect precise GPS location.
• Cookies and similar technologies: see Section 5.
• To provide, operate, maintain, and improve the Service.
• To process transactions, deliver messages, and fulfill our contractual obligations to customers.
• To authenticate users, secure accounts, and prevent fraud or abuse.
• To respond to inquiries, provide customer support, and communicate about your account or the Service.
• To send administrative messages (such as billing notices, security alerts, and changes to our terms or this Policy).
• To send marketing communications about Textual's own products and services, where permitted by law and subject to your right to opt out.
• To analyze usage of the Service in aggregate to improve features, performance, and reliability.
• To comply with legal obligations and enforce our Terms of Use.
• Deliver the text messages you (or, where Textual acts as a processor, a brand's subscribers) have opted in to receive.
• Process replies, including transactional confirmations, customer support, and STOP and HELP keyword responses.
• Maintain records of consent, opt-in, and opt-out as required by the Telephone Consumer Protection Act (TCPA), the CTIA Messaging Principles and Best Practices, and applicable carrier requirements.
• Detect and prevent fraud, abuse, or violations of our Terms of Use.
• Marketing emails: unsubscribe using the link in any marketing email or by emailing help@textual.com.
• Text messages: reply STOP to any message to opt out.
• Account information: log in to your Textual account to review and update most account information.
• Cookies: use your browser controls or our cookie preferences tool.
• Access: confirm whether we process your personal information and obtain a copy.
• Correction: correct inaccurate or incomplete information.
• Deletion: delete personal information we hold about you, subject to legal exceptions.
• Portability: receive your information in a structured, commonly used, machine-readable format.
• Opt out of marketing: opt out of marketing communications at any time, as described in Section 6.
• Non-discrimination: we will not discriminate or retaliate against you for exercising these rights.

Information Collected Automatically

Information from Limited Third-Party Sources

We may receive limited information from authentication providers when you log in using single sign-on, from publicly available business directories for sales and account-verification purposes, and from service providers who perform functions on our behalf. We do not purchase consumer mobile lists, and we do not augment subscriber data with information bought from data brokers.

2. How We Use Information

3. SMS, Mobile Information, and Messaging

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Mobile opt-in data and consent records are never sold, rented, or shared for any purpose other than the direct delivery of the messaging service you signed up for.

How we use mobile numbers and SMS data. We use mobile numbers and SMS-related information solely to:

Subprocessors used to deliver SMS. To deliver text messages, we use messaging infrastructure providers (for example, the SMS providers and aggregators we use, and mobile carriers). These providers are contractually bound to use mobile information only to deliver messages on our behalf, to keep it confidential, and not to use it for their own marketing or promotional purposes. They have no permission to sell, share, rent, or otherwise commercialize mobile information.

Program details. Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. Full SMS program terms are in Section 2 of our Terms of Use.

Opting out. You can opt out of text messages at any time by replying STOP to any message. Reply HELP for help, or email help@textual.com. After you opt out, we retain your opt-out record so we do not message you again, but we will not use your number for any other purpose.

4. How We Share Information

We do not sell or share personal information for cross-context behavioral advertising, targeted advertising, or any other marketing or promotional purpose. We do not exchange personal information with affiliates or partners for their independent marketing use.

We share personal information only in the following limited circumstances, and only when strictly necessary. All of the categories below exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

a. Service Providers and Subprocessors. We share information with vendors that perform services strictly necessary to operate the Service, such as cloud hosting, SMS delivery infrastructure, payment processing, customer-support tooling, error monitoring, and security services. Each provider is bound by a written contract that limits its use of personal information to performing the services we requested, prohibits selling or using the information for its own marketing or promotional purposes, and requires confidentiality and appropriate security safeguards.

b. Our Business Customers (When We Act as a Processor). When you interact with a brand that uses Textual's platform (for example, by texting a brand's short code or toll-free number), the message content and your mobile number are made available to that brand because the brand is the controller of that communication. Our handling of that data is governed by our Data Processing Agreement with the brand and by the brand's own privacy policy.

c. Legal and Safety. We may disclose information when we have a good-faith belief that disclosure is necessary to (i) comply with a valid legal process, subpoena, court order, or applicable law; (ii) enforce our Terms of Use; (iii) protect the rights, property, or safety of Textual, our users, or the public; or (iv) detect, prevent, or address fraud, security, or technical issues.

d. Corporate Transactions. If Textual is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal information may be transferred as part of that transaction. We will require any successor to honor the commitments in this Policy or to provide you with notice and a meaningful choice before any materially different treatment of your information.

e. With Your Consent. We may share information with third parties when you direct us to do so (for example, when you ask us to integrate your Textual account with a connected service such as Shopify or Salesforce Commerce Cloud).

5. Cookies and Analytics

Our website uses cookies and similar technologies (such as pixels and local storage) for essential site functionality, security, performance measurement, and analytics. We do not use cookies to build advertising profiles for sale to third parties.

We may use analytics providers to understand aggregate usage of our website. These providers act as our service providers under written contracts that prohibit them from using the information for their own purposes.

You can control cookies through your browser settings or, where presented, our cookie preferences tool. Disabling certain cookies may affect website functionality.

6. Your Choices and Communication Preferences

Even if you opt out of marketing communications, we may still send transactional and administrative messages necessary to operate your account or comply with law.

7. Your Privacy Rights

Depending on where you reside, you may have some or all of the following rights:

Because Textual does not sell or share personal information for cross-context behavioral advertising or for monetary or other valuable consideration, the right to opt out of "sale" or "sharing" effectively applies by default to all users.

To exercise any of these rights, email help@textual.com. We will verify your identity before fulfilling certain requests and may decline requests where permitted or required by law.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, including encryption in transit, access controls, logging, vulnerability management, and ongoing security review of our subprocessors. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations (including TCPA and carrier-mandated record-keeping for SMS consent), resolve disputes, and enforce our agreements. When personal information is no longer required, we delete or de-identify it in accordance with our retention schedule.

10. Children

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. You must be at least 18 years of age to opt in to a text messaging program. If you believe a child has provided us with personal information, contact help@textual.com and we will promptly delete it.

11. Third-Party Websites and Services

The Service may contain links to, or integrations with, third-party websites and services. Those third parties have their own privacy practices, and Textual is not responsible for their content or practices. We encourage you to review their policies.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will post a prominent notice on our website, notify you by email, or notify you through the Service. Continued use of the Service after the effective date of an updated Policy constitutes acceptance of it.

13. Contact Us

Textual, LLC

520 W Idaho St

Boise, ID 83702

Email: help@textual.com

14. Region-Specific Disclosures

California Residents

These disclosures apply to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

Categories collected. In the past 12 months, we have collected: identifiers (name, email address, mobile phone number, IP address, account ID); customer records (contact and billing information); commercial information (records of services purchased, ordered, or considered); internet or other electronic network activity (browser, device, and usage data); geolocation data (approximate, from IP address only); professional or employment-related information (business contact details); and inferences drawn from the above to support and improve the Service.

Sale or sharing. In the past 12 months, Textual has not sold or shared personal information as those terms are defined under the CCPA.

Sensitive personal information. We do not use or disclose sensitive personal information for purposes that would require a "Right to Limit" under the CCPA.

California rights. California residents have the rights described in Section 7, including the rights to know, correct, delete, opt out of sale or sharing (honored by default), and non-discrimination. Email help@textual.com to exercise these rights. You may designate an authorized agent, subject to verification.

European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

Textual is based in the United States and primarily serves customers in North America. To the extent the GDPR or UK GDPR applies, our legal bases include: (i) performance of a contract with you; (ii) compliance with a legal obligation; (iii) our legitimate interests in operating, securing, and improving the Service, where not overridden by your rights; and (iv) your consent, where required. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Contact help@textual.com.

Other U.S. State Privacy Laws

Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Texas, Utah, and Virginia) have rights similar to those in Section 7. Because Textual does not sell personal information, share it for targeted advertising, or engage in profiling that produces legal or similarly significant effects, no separate opt-out mechanism is required. Contact help@textual.com to exercise any applicable rights.