Privacy Policy
Effective date: April 23, 2025 · Last updated: October 28, 2026
Scope of this Privacy Policy
This Privacy Policy applies to information collected by Statxt LLC ("Statxt," "we," "us," or "our") through our websites, web applications, dashboards, APIs, integrations, messaging services, billing systems, support channels, and any other products or services that link to or reference this Privacy Policy (collectively, the “Services”).
This Privacy Policy applies regardless of how the Services are accessed, including through desktop or mobile browsers, APIs, integrations, or third-party platforms.
Information we collect
- Account and contact details (such as name, email, organization, and login credentials).
- Billing and transaction information (such as subscription status, invoices, transaction identifiers, timestamps, and payment state).
- Usage and device data (such as IP address, browser type, access logs, and activity on the Services).
- Messaging metadata and content processed through the Services, including message logs, delivery status, timestamps, routing data, attachments/media, and system-generated compliance records.
- If enabled, call recordings and related call metadata (such as timestamps, participants, and routing or delivery events).
Information about contacts and third parties
Customers may upload, submit, import, or otherwise process information relating to third parties, including phone numbers, contact details, message content, attachments, and communication history (“Contact Data”).
Customers act as the data controller for Contact Data and are solely responsible for providing required notices, obtaining valid consent, honoring opt-out requests, and ensuring compliance with applicable laws, including the Telephone Consumer Protection Act (TCPA), carrier rules, and messaging regulations.
Statxt processes Contact Data solely as a service provider or processor, on behalf of and under the instructions of customers, and does not independently determine the purposes of such processing.
The Services may record and store compliance-related artifacts provided or generated in connection with messaging, such as opt-in sources, consent language, timestamps, message history, opt-out keywords (including STOP), delivery receipts, and suppression list activity, where available. These records may be used to operate the Services, enforce compliance, resolve disputes, and respond to lawful requests.
Individuals whose information has been processed through the Services should direct questions or requests regarding their data to the organization that collected their information.
Google user data
This section covers data we receive from Google APIs when you sign in with Google or connect a Google account to STATXT, STATXEO, or STATXE (together, the “Statxt apps”). Each app asks only for the access its features need, and you approve it on Google’s consent screen.
What we access:
- Google sign-in (STATXT, STATXEO, STATXE): your name, email address, profile picture, and Google account identifier, to create your account and sign you in.
- STATXT spreadsheet import: the Google Sheets spreadsheets you choose with Google’s file picker, and the rows of the tab you pick. STATXT cannot browse or open the rest of your Google Drive.
- STATXE: Google Sheets and Google Docs you ask the assistant to read or change; Google Drive files you choose with the Google Drive picker, and files STATXE creates for you (STATXE cannot browse the rest of your Drive); events on your Google Calendar, through the Inbox calendar; for corporate administrators who connect their Google Workspace directory, the organization’s user and group list (read-only); and, for STATXE staff only, Gmail Postmaster Tools statistics for the sending domains STATXE operates (aggregate delivery and reputation data, no message content).
How we use it: only to provide the features you use: signing you in, importing contacts from the spreadsheet you chose (and re-reading it on a schedule you set up), answering your requests in the STATXE assistant, reading or updating the files you name, creating documents you ask for, showing and editing your calendar events, and syncing your company directory. STATXE changes Google files only after you confirm in the conversation. Contacts you import from a spreadsheet become Contact Data, described above.
AI processing: when you ask an assistant to work with Google data (for example, STATXE answering a question about a document, or the STATXT assistant suggesting column mappings for a spreadsheet import), we send the relevant content to the AI model providers that power the assistant, which process it only to generate that response. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.
Sharing: we do not sell Google user data or use it for advertising. We share it only with the service providers needed to run these features (hosting and AI processing) under confidentiality obligations, when required by law, or with your consent. Our staff do not read your Google data unless you ask us to for support, it is needed for security, or the law requires it.
Storage and protection: we store encrypted Google authorization tokens (AES-256-GCM), the connected email address, the permissions you granted, and the name and ID of the spreadsheet you saved. Content read from Google is used for your request; in STATXE it is kept only as part of the assistant conversation it appears in.
Your control: disconnect Google at any time (in STATXT, Settings → Integrations; in STATXE, Automations → Integrations). We revoke the app’s access at Google and delete the stored tokens. You can also remove any Statxt app at myaccount.google.com/permissions. To delete Google data we hold, including contacts imported from a spreadsheet, delete it in the app or email support@statxt.com.
Limited Use: STATXT's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Legal bases for processing
We process personal information where necessary to provide and operate the Services, fulfill contractual obligations, comply with legal requirements, protect the security and integrity of the Services, prevent fraud and abuse, and pursue legitimate business interests such as compliance, auditing, and service reliability.
How we use information
- Provide, operate, maintain, and improve the Services.
- Authenticate users and secure accounts.
- Provide customer support and respond to requests.
- Comply with legal obligations, carrier requirements, and enforce platform policies.
- Monitor usage for reliability, abuse prevention, and compliance.
Billing and payment processing
Statxt uses third-party payment processors (such as Stripe, Inc.) to process payments, subscriptions, and credit purchases. We do not store full payment card numbers or sensitive payment credentials.
We receive limited billing-related information (such as transaction identifiers, payment status, amounts, and timestamps) for account administration, dispute resolution, fraud prevention, compliance, and recordkeeping.
Credits, balances, and transaction records
The Services may support prepaid credits or stored-value units (“Credits”). We maintain detailed ledger records related to Credit purchases, grants, usage, adjustments, refunds, reversals, and balances for accounting, compliance, dispute resolution, auditing, and fraud prevention.
Automated processing, monitoring, and enforcement
We use automated and manual systems to monitor, log, analyze, and enforce compliance with our policies, applicable law, and carrier requirements.
These processes may include message analysis, delivery monitoring, rate-limit enforcement, opt-out handling, audit logging, and abuse detection, and may result in message blocking, throttling, suspension, or termination of accounts where required to protect the Services or comply with law.
Statxt is not a telecommunications carrier. Message delivery is subject to carrier networks, third-party providers, recipient device settings, and other factors outside our control. We do not guarantee delivery, timing, or routing outcomes, and we may block or restrict messaging to protect deliverability, comply with carrier rules, or prevent suspected abuse.
How we share information
We may share information with service providers that support the operation of the Services (such as hosting, analytics, messaging carriers, and payment processors), with the organization that administers your account, and with authorities when required by law.
We do not sell personal information and do not share personal information for targeted advertising or cross-context behavioral advertising purposes.
We do not use message content uploaded to the Services for our own marketing purposes. We process messaging content and related metadata only to provide, secure, support, and improve the Services, and to support compliance features and abuse prevention.
Mobile information and SMS consent data are not shared with third parties or affiliates for marketing or promotional purposes.
Your privacy rights
Depending on where you live, you may have the right to:
- Know what personal information we hold about you and get a copy of it.
- Correct personal information that is inaccurate.
- Delete personal information we hold about you.
- Receive your information in a portable format.
- Object to or restrict certain processing, or withdraw consent where we rely on it.
- Opt out of the sale of personal information or its use for targeted advertising.
We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of. We treat browser privacy signals, such as Global Privacy Control, as a request to opt out.
To make a request, email support@statxt.com from the address on your account, or tell us how to reach you. We will verify your identity before acting and respond within the time required by applicable law. You may use an authorized agent, and we may ask for proof that the agent is acting for you. If we decline your request, you can ask us to reconsider by replying to our decision. We will not treat you differently for exercising these rights.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you may also complain to your local data protection authority.
If you received messages from a business that uses Statxt, that business controls your information. Contact it directly, or reply STOP to its messages to opt out. We will help our customers respond to requests about Contact Data.
Data retention
We retain information for as long as reasonably necessary to provide the Services, comply with legal and regulatory obligations, resolve disputes, enforce agreements, prevent fraud, and maintain accurate records. Certain logs, billing records, and compliance data may be retained after account termination.
We may preserve information for longer periods where required to comply with legal obligations, to enforce our agreements, or to comply with preservation requests or litigation holds.
Retention periods may be limited, and we may delete message content, media, call recordings (if enabled), or related metadata to comply with law, provider/carrier requirements, security needs, operational needs, storage limits, policy changes, or upon account suspension or termination.
Security
We implement administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure.
Children’s privacy
The Services are not intended for individuals under 18. We do not knowingly collect personal information from children under 18.
International data processing
Information may be processed in the United States and other jurisdictions where Statxt or its service providers operate. Data protection laws in these jurisdictions may differ from those in your location.
Contact
Questions about this Privacy Policy: support@statxt.com
See also our Terms.