Privacy Policy

EZText is an AI-powered text messaging assistant built for small and medium-sized businesses. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information. It applies to both the businesses that subscribe to EZText (our "Operators") and to the customers, prospects, and other individuals who text the phone numbers Operators connect to the EZText service ("End Users").

Last updated: June 25, 2026

1. Who we are

EZText ("EZText," "we," "us," "our") is an AI texting agent platform for small businesses, operated from New Jersey, United States. We provide software that lets a business connect a phone number and have inbound customer text messages answered automatically by an AI assistant trained on that business's public website, FAQs, and any additional context the Operator provides.

For most personal information processed through the EZText service, EZText acts as a data processor on behalf of the Operator. The Operator is the data controller: they determine what data flows through the service, who their End Users are, and what consent or notice their End Users have received. For EZText's own marketing site visitors, Operator account information, billing data, and similar, EZText acts as the data controller.

2. Information we collect

2.1 Information Operators provide directly

When a business signs up for EZText, we collect:

• Account and contact details: business name, business website URL, owner or contact name, email address, phone number, ZIP code or service area.
• Business content: any documents, FAQs, menus, policies, pricing sheets, scripts, or other content the Operator uploads or pastes so the AI agent can answer accurately on their behalf.
• Public website content: if the Operator provides a website URL, EZText crawls publicly accessible pages of that site to build the agent's knowledge base. The crawl respects standard web conventions and is limited to text content.
• Payment information: handled by our payment processor, Stripe. EZText does not store full card numbers or bank account details on our own systems.
• Support and feedback: messages you send us via email or in-app.

2.2 Information collected from End Users (customers texting)

When an End User sends an SMS or iMessage to a phone number connected to EZText through an Operator's account, we receive and process:

• Phone number of the End User
• Message content of the inbound text and the outbound AI reply
• Timestamps of each message
• Routing metadata from our SMS provider (e.g., carrier, message status, delivery receipts)
• Any other information an End User voluntarily includes in the body of a message (such as name, address, appointment preference, photographs, etc.)

End Users do not have an account with EZText. We process this data on the Operator's behalf solely to enable the texting service the Operator offers. The Operator is responsible for obtaining any required consent from their End Users and for displaying a privacy notice on their own properties.

2.3 Information collected automatically

When you visit eztext.co or use the EZText web portal, we collect:

• IP address, approximate geolocation derived from IP, browser type and version, operating system, device type
• Pages visited, referring URL, time spent on pages, clickstream data
• Cookies and similar technologies (see Section 15)
• Error logs and diagnostic information necessary to operate and secure the service

3. How we use information

We use the information described above to:

• Provide the service: route inbound texts to the AI agent, generate replies in the Operator's voice, deliver outbound replies to End Users, store conversation history for the Operator's review in their portal.
• Train per-Operator agent context: the website content, uploaded documents, and additional context the Operator provides are used to ground the AI's responses for that Operator's agent only. We do not pool one Operator's content into another Operator's agent and we do not use Operator content or End User messages to train base AI models. (See Section 4.)
• Bill and manage subscriptions: process recurring monthly payments, send invoices and receipts, manage cancellations and refunds.
• Operate the platform: debug, secure, prevent abuse, enforce our Terms, maintain backups, monitor service quality through automated stress testing.
• Communicate with Operators: service announcements, security notices, billing-related messages, and (with opt-out controls) product updates.
• Improve the platform: analyze aggregated and de-identified usage patterns to improve features, reliability, and AI response quality.
• Comply with law: respond to lawful requests, enforce legal rights, prevent fraud, protect safety.

4. AI processing and large language models

EZText's AI responses are generated by calling commercial application programming interfaces (APIs) provided by Anthropic (the maker of the Claude family of large language models). When an End User texts an Operator's number, the following data is sent to Anthropic for the sole purpose of generating that single reply:

• The Operator's persona prompt (built from their website, uploaded documents, and rules)
• The recent conversation history with that End User
• The current inbound message

Per Anthropic's published commercial terms, inputs and outputs sent through their commercial API are not used to train Anthropic's models. Anthropic retains data only as required to provide and secure the service. EZText never sends Operator or End User data to consumer AI products (such as chat interfaces) and never uses Operator content to train its own models.

5. Sharing and disclosure

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We share information only in the limited categories below:

• With the Operator that owns the account: conversation history, End User phone numbers, and other End User data are visible to the Operator in their EZText portal.
• With service providers (sub-processors) listed in Section 6, each of which is contractually limited to providing services to us.
• For legal reasons: if required by law, court order, or government request; to enforce our Terms; to investigate fraud, abuse, or safety risks; to protect the rights or property of EZText, Operators, End Users, or the public.
• In a corporate transaction: if EZText is involved in a merger, acquisition, financing, or sale of assets, information may be transferred. We will provide notice and any required consent opportunity before personal information becomes subject to a different privacy policy.
• With your consent: in any other situation where you have given us explicit permission.

6. Sub-processors and service providers

EZText relies on a small set of trusted infrastructure providers:

Each sub-processor is contractually obligated to handle data only on our instructions and in accordance with applicable data protection laws. A current list of sub-processors can be requested at the contact address in Section 17.

7. SMS, TCPA, and end-user messaging

EZText handles inbound and outbound text messaging in the United States under the Telephone Consumer Protection Act (TCPA), CTIA Messaging Principles and Best Practices, and applicable state laws.

7.1 Operator responsibility for consent

The Operator is solely responsible for obtaining and maintaining any required prior express consent from End Users before sending outbound marketing or promotional text messages, and for complying with the TCPA, CTIA, A2P 10DLC rules, and other applicable SMS laws. EZText provides the technical platform; the legal relationship with the End User belongs to the Operator.

7.2 Opt-out (STOP)

End Users can opt out at any time by replying STOP, UNSUBSCRIBE, END, QUIT, or CANCEL to a message from a number connected to EZText. Opt-outs are honored at the platform level and the number is suppressed from further outbound communication unless the End User explicitly opts back in by sending START, UNSTOP, or a similar resubscribe keyword.

7.3 Help (HELP)

Replying HELP at any time returns information about the Operator the End User is texting and how to reach a human. Message and data rates may apply per the End User's mobile carrier.

7.4 Frequency

Message frequency varies based on the conversation. EZText replies once per inbound message and may send a small number of follow-ups for appointment confirmations, reminders, or escalations as configured by the Operator.

8. Data retention

We retain information only as long as needed for the purposes described in this Policy:

• Operator account data: for the life of the account, plus up to 24 months after cancellation for legal, tax, and accounting purposes.
• Conversation history: retained for the life of the Operator's account so the Operator can review and search it. Operators may request deletion of specific conversations at any time via Section 17.
• Payment records: retained as required by applicable financial and tax regulations (generally 7 years in the United States).
• Web analytics and logs: retained in identifiable form for up to 24 months, then de-identified or deleted.
• Backups: backups containing the above categories follow the same retention schedule and are rotated regularly.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, alteration, disclosure, or destruction. These include transport-layer encryption (HTTPS) for all traffic, encrypted storage at the platform layer, authentication and access controls for the Operator portal, principle-of-least-privilege access for the small EZText team, output policy enforcement to prevent accidental disclosure of sensitive information by the AI agent, and regular dependency and security review.

No method of transmission or storage is perfectly secure. If we become aware of a personal data breach affecting your information, we will notify you and (where applicable) the relevant supervisory authority within the timeframes required by law.

10. Your rights

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete personal information (subject to limited exceptions)
• Restrict or object to certain processing
• Receive a portable copy of information you provided to us
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at the address in Section 17. We will verify your identity (in the case of End Users, we will route the request to the Operator that controls the relevant data) and respond within the timeframes required by law (generally 30-45 days).

11. California (CCPA / CPRA) rights

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you specific rights:

• Right to know what categories of personal information we collect, the sources, the purposes, the categories of third parties we share with, and the specific pieces collected about you
• Right to delete personal information we collected from you
• Right to correct inaccurate personal information
• Right to opt out of the "sale" or "sharing" of personal information. EZText does not sell or share personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information. EZText does not use sensitive personal information for purposes that would require the right-to-limit disclosure.
• Right to non-discrimination for exercising any of these rights.

Submit requests via the contact in Section 17. You may also designate an authorized agent to make a request on your behalf, in which case we will verify the agent's authority.

12. European Economic Area, UK, and Swiss (GDPR) rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws apply. In addition to the rights listed in Sections 10-11, you have the right to lodge a complaint with your national supervisory authority.

The legal bases we rely on for processing your personal information are:

• Contract — to provide the service Operators have subscribed to
• Legitimate interests — to operate, secure, and improve the service in ways that do not override your rights
• Consent — where required, for example for optional marketing communications
• Legal obligation — to comply with tax, accounting, and other legal requirements

Where EZText processes End User information on behalf of an Operator, we do so as a data processor under a data processing agreement. End User rights requests should generally be directed to the Operator first; we will support the Operator in responding.

13. International data transfers

EZText is operated from the United States and our service providers are primarily located in the United States. If you are accessing the service from outside the United States, your information will be transferred to and processed in the United States. For transfers from the European Economic Area, United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms with our sub-processors. Copies of the relevant transfer documents can be requested at the contact in Section 17.

14. Children's privacy

The EZText service is intended for use by businesses and their adult customers. It is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected personal information from a child under 16, please contact us and we will delete it.

15. Cookies and analytics

We use a small number of strictly necessary cookies and local-storage items to keep you logged in to the Operator portal, remember your session preferences, and operate the site. We may also use privacy-respecting analytics to understand how visitors use the marketing site so we can improve it. We do not currently use third-party advertising or cross-site tracking cookies. If we ever add tracking that requires consent under applicable law, we will surface a consent banner.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy at this URL and update the "Last updated" date at the top. For material changes that affect how we use personal information, we will provide more prominent notice (such as an email to Operator account holders or an in-portal notification) before the change takes effect.

17. Contact us

For privacy-related questions, requests, complaints, or to exercise any of the rights described in this Policy, please submit an outreach through our website at https://eztext.co/. We will route your inquiry to the appropriate team and respond within the timeframes required by applicable law.

For general support, billing, or account-related questions, please use the same outreach channel on our website. We do not maintain a public-facing email address for these requests; routing all correspondence through the website lets us verify the requester, track the inquiry, and respond securely.

See also our Terms of Service.