Privacy Policy

Scope and Applicability

The Policy applies to your information when you visit our website or otherwise use the Services. Please note that this Policy does not apply to the extent that we process Personal Information in the role of a processor (or a comparable role such as a "service provider" in certain jurisdictions) on behalf of our Customers, including where we collect Customer Data on behalf of our Customers, or where our Customers otherwise collect, use, share or process Personal Information via our Services. Each of our Customers, not TextWork, controls what information about you is collected by the Services on behalf of such Customer. For detailed privacy information applicable to situations where a Customer who uses the Services is the controller, please reach out to the respective customer directly. We are not responsible for the privacy or data security practices of our Customers, which may differ from those set forth in this Privacy Policy. If not stated otherwise either in this Privacy Policy or in a separate disclosure, we process such Personal Information in the role of a processor or service provider on behalf of a Customer (and/or its affiliates), who is the responsible controller of the applicable Personal Information.

This Privacy Policy also does not apply to any third-party applications or services that are used in connection with our Services, or any other products, services or accounts provided by other entities under their own terms of service and privacy policy (collectively, "Third-Party Services"). For example, a Customer may connect, directly or through another application, third party applications and platforms, and other products and services to TextWork. These Third-Party Services are not part of our Services and are provided by independent third parties under their policies and terms. Lastly, the Site or Services may contain links to other websites. We have no control over these websites and they are subject to their own terms of use and privacy policies.

What Information Do We Collect?

Information You Provide to Us

• Account Information. To create an account for the Services or to enable certain features, we may require that you provide us with information for your account such as name, email, phone number, profile picture, and authentication credentials.
• Payment Information. If you sign up for a paid subscription, we (or our payment processors) may need your billing details such as credit card information, banking information, and billing address. Your payment information, such as your payment method (valid credit card number, type, expiration date or other financial information), is collected and stored by our third party payment processing company (the "Payment Processor") and use and storage of that information is governed by the Payment Processor's applicable privacy policy. As of the last updated date of this Privacy Policy listed above, Stripe is the Payment Processor used within the Services and its privacy policy is available at https://stripe.com/us/privacy or such other URL designated by Stripe. In order to facilitate your transactions, we may collect and store your credit card type, the last four digits of your credit card number, and expiration date, but no other financial information.
• Messages and Other Customer Data. In using our Services, our customers and their team members may send, upload, or instruct TextWork to collect text messages, photos and media files, conversation logs, and the report summaries and structured data our AI generates from them, seek customer support, or provide other Customer Data (defined in our Terms of Service) to us. Our use of and processing of Customer Data is governed by our Terms of Service or other services agreement with the Customer.
• Business Contact Information. If you are a business representative, we collect your information in connection with the performance of the agreement or potential agreement with us. This information may include your first name, last name, contact information (e.g., email, phone, address), job title, and any other information related to the performance of the agreement with us.
• Other Information You Provide. We receive other information from you when you choose to interact with us in other ways, such as if you request a demo, sign up for one of our webinars or newsletters, participate in a research study or event, or otherwise communicate with us.

Calendar Integration Data

When you choose to connect your calendar (such as Google Calendar or Microsoft Outlook), you grant TextWork both read and write access to that calendar. Specifically, we:

Read the following information from your connected calendar:

• Your calendar availability (free/busy times)
• Event details including titles, descriptions, times, locations, and attendees

Write to your connected calendar by creating, updating, and deleting events on your behalf, including:

• Events scheduled, rescheduled, or cancelled through TextWork (for example, jobs, appointments, and inspections coordinated via SMS or our AI agent)
• Event metadata such as titles, descriptions, locations, start and end times, attendee email addresses, and meeting links derived from your conversations and reports
• Calendar invitations sent to attendees you specify

Calendar data we read and write is used solely to provide scheduling, availability, and event management features within TextWork. We do not use your calendar data to train AI models, serve advertising, or for any purpose unrelated to the features you have enabled. We store an encrypted OAuth refresh token to maintain your calendar connection. You can disconnect your calendar at any time from your TextWork settings or dashboard, which immediately revokes our access; events previously created on your calendar will remain unless you delete them.

For Google Calendar, our access uses Google OAuth scopes that permit reading and managing events on calendars you own or have access to. Our use and transfer of information received from Google APIs (including any data obtained via read or write operations) adheres to the Google API Services User Data Policy, including the Limited Use requirements. For Microsoft Outlook, equivalent read/write access is granted via Microsoft Graph API scopes and is governed by Microsoft's terms of use.

Information We Collect Automatically

When you visit, use, and interact with the Services, we may receive the following information about your visit, use, or interactions ("Technical Information"):

• Log Data. Information that your browser automatically sends whenever you use our website ("log data"). Log data includes your internet protocol address, browser type and settings, the date and time of your request, and how you interacted with our website.
• Usage Data. We may automatically collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, computer connection, IP address, and the like.
• Device Information. Includes name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.
• Analytics. We may use a variety of online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use the Services.

We use cookies and other tracking technologies to help us collect and process Technical Information. Please see the "Cookies and Tracking" section below for more information.

Information We Receive from Third Parties

• Third-Party Integrations. If you connect a third-party account to our Services (e.g., Google or Microsoft for calendar or email), we collect the authentication information and account details provided to us by the provider to enable the integration.
• Marketing Information. We may receive marketing or demographic information about you from third parties or partners, for example, data about your organization or industry or other public information from sources like social media or online professional profiles.
• Service Providers. We may receive information from our service providers, who help us operate our business.
• Information from Other Sources. We may obtain information from other sources, including, but not limited to, publicly available sources, third-party data providers, brand partnerships, and third-party integrations you consent to, or through transactions such as mergers and acquisitions. We may combine this information with other information we collect from or about you.

How Do We Use The Information We Collect?

We use the information we collect:

• To deliver and improve the Services and your overall user experience
• To generate AI-powered summaries, reports, and analytics from the messages and media you and your team send us, and to deliver them to the managers you designate
• To check calendar availability and create, update, or cancel calendar events on your behalf when you connect a calendar
• To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity
• To link or combine user information with other Personal Information
• To develop, improve or expand our business, products and services
• To conduct internal reporting, auditing, and research, including focus groups and surveys
• To compare and verify information for accuracy and update our records
• To email, message, or otherwise contact you with information and updates about us and the Services
• To respond to your comments and questions and provide customer service
• To send you information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages
• To analyze how you use the Services with analytics tools to help us understand traffic patterns and know if there are problems with the Services
• To combine information with other data we already have to improve your experience with our Services or inform you of products and services we think may be of interest to you
• In connection with a merger, acquisition, reorganization or similar transaction
• When required by law or to respond to legal process
• To protect our users, other individual lives, and/or the rights or property of TextWork
• To maintain the security of the Services
• At your direction or instruction, or for any other purpose with your consent
• To create aggregate and de-identified data. We will maintain such data in a de-identified form and will not attempt to re-identify any de-identified data, except that we may attempt to re-identify the data solely for the purpose of determining whether our deidentification processes are compliant with applicable laws

We do not sell your personal data to third parties.

Data Sharing and Disclosure

We may share your information with:

• Service providers: Third-party vendors who help us operate our service (e.g., SMS providers like Twilio, cloud infrastructure, payment processors like Stripe). These providers are contractually bound to protect your data.
• AI providers: We use OpenAI, Anthropic (Claude), and X.AI (Grok) to power our AI features. Message content is processed by these providers in accordance with their data processing policies.
• Calendar providers: When you connect Google Calendar or Microsoft Outlook, we read from and write to your calendar through Google's Calendar API or Microsoft's Graph API, respectively. See the "Calendar Integration Data" section above for details, including our adherence to the Google API Services User Data Policy Limited Use requirements.
• Legal requirements: When required by law, court order, or to protect our rights, safety, or property.

Data Retention

We retain your data for as long as your account is active and as needed to provide our services. After you cancel your subscription, we may retain your data for a grace period as specified in your account dashboard, after which it may be deleted. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights (GDPR and CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Request that we limit how we use your data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data
• Withdraw consent: Withdraw consent where we rely on it for processing

To exercise these rights, please contact us through our website at https://textwork.co. We will respond to your request within the timeframe required by applicable law.

If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.

Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how you use our website. You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our service.

Data Controller and Processor

When you use TextWork to collect data from your employees or field workers, you act as the data controller and TextWork acts as the data processor. As the data controller, you are responsible for ensuring you have the legal basis to collect such data and for informing your employees about how their data is processed. For more details, see our Terms of Service.

Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

International Transfers

Your data may be transferred to and processed in countries other than your own. We take appropriate safeguards to ensure your data receives an adequate level of protection in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a prominent notice on our website at least 30 days before the changes take effect. Your continued use of TextWork after the effective date constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please visit our website at https://textwork.co.