Legal
Privacy Policy
How we collect, use, share, and protect personal data when you use Texterz.
Last updated: 2026-06-19
1.Who We Are
Texterz is a brand of IKARUSHOLDS LLC(“we”, “us”, “our”, or “Texterz”), a limited liability company organized under the laws of the State of Florida, United States. We provide a business-to-business platform for building AI agents and communication workflows.
This Privacy Policy applies to (a) businesses and professionals who register for and use the Texterz platform (“Customers”), and (b) the end users with whom Customers communicate through agents and workflows built on the platform (“End Users”).
For data we process on behalf of a Customer, the Customer is the controller and we are the processor. For data we process about our own Customers, we act as the controller.
We do not currently appoint an EU representative under Article 27 GDPR. EU data subjects may contact us directly at the address below.
2.What Data We Collect
2.1Customer (business user) data
- Account data: name, work email, hashed password, workspace name, role, and authentication tokens.
- Billing data: billing address, tax identifiers, payment method reference (held by our payment processor), invoice and transaction history.
- Configuration: bot and workflow settings, uploaded knowledge sources, integrations you connect, and system prompts you author.
- Usage: feature usage, credit consumption, API call metadata, audit log entries.
- Technical: IP address, device, browser, session identifiers, and timestamps, collected for security, fraud prevention, and abuse detection.
- Correspondence: messages you send to our support, sales, or legal addresses.
2.2End User data (people your bots talk to)
- Identifiers: phone number, email address, or channel handle, depending on which messaging channel the End User contacted.
- Conversation content: the messages exchanged with the Customer's bot or workflow, including inbound messages, AI-generated responses, and attached media.
- Derived data: structured facts and preferences inferred from conversations and used to personalize future responses, where the Customer enables such features.
- Delivery metadata: timestamps, delivery and read receipts, and channel-level error codes.
End Users should consult the privacy notice of the business operating the bot they are communicating with for primary disclosure of how their data is used.
3.How and Why We Use Data
- Service delivery: to operate accounts, run agents and workflows, route messages, and bill usage.
- Security and fraud prevention: to detect abuse, maintain audit logs, and protect the platform and its users.
- Service improvement: to monitor performance, debug errors, and improve features in aggregate. We do not use Customer content or End User content to train general AI models.
- Customer support: to respond to questions, requests, and incident reports.
- Communications: to send transactional notices (billing, security, product changes) and, with consent or where permitted by law, marketing communications you can opt out of at any time.
- Legal and compliance: to comply with applicable law, enforce our terms, and respond to lawful requests.
We do not sell personal data. We do not share personal data for cross-context behavioral advertising.
4.Legal Bases for Processing (GDPR)
Where the GDPR applies, we rely on the following legal bases under Article 6(1):
| Purpose | Legal basis |
|---|---|
| Providing the Service to Customers | Performance of a contract (Art. 6(1)(b)) |
| Billing and tax records | Performance of a contract and legal obligation (Art. 6(1)(b) and (c)) |
| Security, fraud prevention, abuse detection | Legitimate interests in protecting our platform and users (Art. 6(1)(f)) |
| Aggregate product analytics and improvement | Legitimate interests in maintaining and improving the Service (Art. 6(1)(f)) |
| Marketing communications to existing customers | Legitimate interests, subject to opt-out (Art. 6(1)(f)) |
| Marketing to prospects who consented | Consent (Art. 6(1)(a)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
For processing performed on behalf of a Customer (for example, handling End User messages), the Customer determines the legal basis and is responsible for ensuring lawful processing.
5.Where Data Is Stored
We host the Texterz platform on enterprise cloud infrastructure with primary data centers located in Europe. Customer data, including conversation content, is stored in Europe by default.
Certain functions necessarily involve transfers to the United States or other third countries, including payment processing (handled by our payment processor in the United States) and inference performed by AI model providers (see Section 7). Where such transfers occur, we rely on the European Commission's Standard Contractual Clauses (Commission Decision 2021/914/EU) supplemented by technical measures including encryption in transit and at rest and data minimization.
For Canadian data subjects (PIPEDA), you acknowledge that your data may be processed outside of Canada. You may contact us for information about cross-border processing.
6.How Long We Keep Data
| Data category | Retention |
|---|---|
| Customer account data | Duration of the account plus 90 days after deletion |
| Conversation transcripts | Up to 12 months by default; configurable by the Customer |
| Derived End User facts (memory features) | Until deleted by the End User or by the Customer, or until account closure |
| Security and audit logs | Up to 12 months |
| Billing and tax records | Up to 7 years, as required by applicable tax law |
| Application and error logs | Up to 12 months |
| Session tokens | Up to 30 days from issuance |
After the applicable retention period, data is deleted or irreversibly anonymized. Backups may retain encrypted copies for a short additional window before automated purge.
7.AI Processing Disclosure
Texterz uses large language models provided by third-party AI model providers to generate responses and to power automation features. Conversation content may be transmitted to these providers solely for the purpose of generating a response.
- We do not permit AI model providers to use Customer content or End User content to train their models, and we rely on zero-data-retention or short-retention arrangements where technically and contractually available.
- Where feasible, we strip direct identifiers (such as phone numbers and email addresses) from message content before it is passed to an AI model provider for inference.
- AI outputs are probabilistic and may be incomplete, inaccurate, or otherwise unsuitable. Customers are responsible for reviewing AI outputs before relying on them in business, customer-facing, regulated, or safety-relevant contexts.
- Where required by applicable law (including the EU AI Act), End Users are informed that they are interacting with an AI system.
A current list of subprocessors, including the categories of AI model providers we work with, is available on request to privacy@texterz.ai.
8.Data Sharing and Subprocessors
We share personal data only with the following categories of recipients, each bound by contractual data protection obligations:
- Cloud hosting providers used to operate the platform and store data.
- AI model providers used to generate responses, as described in Section 7.
- Payment processors used to bill subscriptions and process credits.
- Email and messaging delivery providers necessary to deliver messages through the channels you enable.
- Monitoring, logging, and security providers used to keep the Service stable and secure.
- Professional advisors (auditors, lawyers, accountants) under duties of confidentiality.
- Authorities where disclosure is required by law, court order, or to protect rights, property, or safety.
- Acquirers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
A complete and current subprocessor list is available on request to privacy@texterz.ai. We do not sell personal data and do not share personal data for cross-context behavioral advertising.
9.Your Rights
9.1EU and UK data subjects (GDPR and UK GDPR)
You have the right to:
- Access the personal data we hold about you (Art. 15)
- Have inaccurate or incomplete data corrected (Art. 16)
- Have data deleted in defined circumstances (Art. 17)
- Restrict processing in defined circumstances (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time, without affecting prior processing
- Lodge a complaint with your national supervisory authority
We aim to respond to verified requests within 30 days, extendable by up to 60 additional days for complex requests, in line with Article 12(3) GDPR.
9.2California residents (CCPA / CPRA)
Texterz is a business-to-business service. If you are a California resident interacting with us as a Customer, you have the right to know, the right to delete, the right to correct, the right to non-discrimination, and the right to limit certain uses of sensitive personal information. We do not sell personal information and do not share personal information for cross-context behavioral advertising. To exercise these rights, email privacy@texterz.ai. We will verify your identity before acting on a request.
9.3Canadian residents (PIPEDA)
You may request access to your personal information, challenge its accuracy, and obtain information about how it is used and disclosed. Where consent is the basis for processing, you may withdraw it, subject to legal or contractual restrictions.
9.4End Users
If you are an End User of a bot or workflow operated by a Texterz Customer, the Customer is the controller of your data. Please contact the Customer first to exercise your rights. You may also contact us at privacy@texterz.ai and we will route your request to the appropriate Customer.
10.Cookies
We use a minimal set of cookies and similar technologies. Details, including categories and purposes, are described in our Cookie Policy.
11.Children
The Service is not directed to children. Use of the platform as a Customer requires that you are at least 18 years old. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, please contact privacy@texterz.ai and we will take steps to delete it.
12.Security
We maintain administrative, technical, and organizational measures designed to protect personal data. These include encryption of data in transit and at rest, role-based access controls, least-privilege principles for staff and systems, isolation of Customer workspaces, audit logging of privileged operations, and regular review of our security posture. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
13.Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days in advance by email to the address associated with your account, by a notice in the Service, or both. Continued use of the Service after the change takes effect constitutes acceptance of the updated Policy.
14.Complaints
15.Contact
Privacy contact
IKARUSHOLDS LLC
1242 SW Pine Island Rd, Ste 42-348
Cape Coral, FL 33991, USA
Privacy: privacy@texterz.ai
Legal: legal@texterz.ai
This Privacy Policy is governed by the laws of the State of Florida, United States, without prejudice to mandatory rights you may have under your local data protection law.