Privacy Policy — TextMeAndGrow

TextMeAndGrow (“we”, “us”, “our”) operates an SMS- and WhatsApp-based service that lets small business owners update their website, Google Business Profile, and connected social media accounts (Facebook Pages, Instagram Business, and X/Twitter) by texting us from their registered phone number. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Who this policy applies to

This policy applies to business owners who sign up for and use the TextMeAndGrow service by texting our number 1-858-398-5975 or messaging us on WhatsApp, and to visitors of textmeandgrow.com and textly.info.

2. Information we collect

2.1 Information you provide by SMS or WhatsApp

Your mobile phone number (the “From” number on your message).
The content of messages you send us, including text, photos, videos, and documents.
Business information you share so we can build and maintain your site and Google Business Profile, such as business name, owner name, address, hours, services, prices, descriptions, and category.
Verification responses, including the one-time 6-digit code we send to confirm your number.

2.2 Information collected automatically

Message metadata from our SMS provider (Twilio): timestamp, direction, delivery status, message SID, and carrier information.
Basic web analytics on textmeandgrow.com and textly.info (page views, referrer, approximate location from IP, device type).
Logs of system actions taken on your behalf (for example, “updated hours” or “published new photo”).

2.3 Information from third parties

Google Business Profile data we read or write on your behalf after you grant us access.
Data from social media platforms you connect (Meta — Facebook Pages and Instagram Business — and X/Twitter), including: your page/account ID and handle, profile fields (name, bio, photo, website, hours, follower and post counts), recent posts and their timestamps, and OAuth access and refresh tokens. We receive and store these only after you complete the platform's OAuth consent screen.
Carrier and line-type lookups (via Twilio Lookup) used to detect spam and fraud.

2.4 Connected social accounts — what we store

For each social account you connect we store: the platform name, the external account/page ID and handle, the OAuth scopes you granted, encrypted access and refresh tokens, token expiry, the most recent audit result (profile completeness and posting cadence), and a log of posts we publish on your behalf (the text, any image, target platforms, the resulting post ID, and the public URL). Tokens are encrypted at rest and used only to perform the actions you request by SMS or from the admin panel.

3. How we use information

To verify your phone number and create your account.
To update your website and Google Business Profile based on your text instructions.
To audit your connected social media accounts (profile completeness and posting cadence) and to draft, tailor per platform, and publish posts (including any images you send) to the Facebook Pages, Instagram Business accounts, and X/Twitter accounts you have connected.
To send you transactional SMS messages: verification codes, confirmations of changes, trial reminders, and service alerts.
To detect, prevent, and respond to fraud, abuse, and spam (rate limits, carrier checks, blocklists).
To operate, secure, debug, and improve the service.
To comply with legal obligations.

We do not use your social media data to train AI models, and we do not post anything to your connected accounts unless you ask us to (or have authorized auto-publishing for high-confidence requests).

4. SMS program details (A2P 10DLC / Toll-Free)

By texting our number you opt in to receive SMS messages from TextMeAndGrow related to your account and the changes you request. Message frequency varies based on your usage. Message and data rates may apply. Reply HELP for help. Reply STOP at any time to unsubscribe; we will send one confirmation message and then stop sending you non-emergency messages. Mobile information (phone numbers and message content) is never sold, rented, or shared with third parties for marketing or promotional purposes.

5. How we share information

We share information only with:

Service providers that help us run the service, under contract and only for that purpose: Twilio (SMS/WhatsApp delivery and lookup), Supabase / Lovable Cloud (database, auth, storage), Cloudflare (hosting and CDN), and AI model providers we use to interpret your messages.
Google, when you ask us to publish updates to your Google Business Profile.
Meta (Facebook & Instagram) and X/Twitter, when you ask us to audit, post, or otherwise act on your connected accounts. Content you ask us to post is sent to those platforms and becomes subject to their own terms and privacy policies.
Law enforcement or regulators, when required by valid legal process.
A successor in connection with a merger, acquisition, or sale of assets, with notice to you.

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

6. Data retention

Active accounts: we retain your business profile, message history, and media for as long as your account is active.
Free trial expiration: if you do not subscribe by the end of your 30-day free trial, we unpublish your site, delete your subdomain, and soft-delete personal information on day 30. Hard deletion occurs on day 37.
Verification codes: deleted after use or expiration (typically within 10 minutes).
Logs and metadata required for security and legal compliance: retained up to 24 months.

7. Your rights and choices

Opt out of SMS: reply STOP to any message.
Access, correct, or delete the information we hold about you: text us “delete my account” or email privacy@textmeandgrow.com.
Disconnect Google Business Profile: revoke our access at any time from your Google account settings.
Disconnect social accounts: text us “disconnect facebook”, “disconnect instagram”, or “disconnect twitter” (or use the admin panel), and additionally revoke access from the platform’s app settings (Meta Business Settings, X connected apps). Disconnecting revokes our tokens and stops all future audits and posts on your behalf.
California, EU/UK, and other regions: you may have additional rights (access, portability, deletion, objection, non-discrimination). Contact us to exercise them.

8. Security

We use TLS in transit, encryption at rest for our database and storage, role-based access control, row-level security on customer data, signed webhooks, and least-privilege API keys. No system is 100% secure; please notify us immediately if you suspect unauthorized access.

9. Children’s privacy

Our service is for business owners and is not directed to children under 13. We do not knowingly collect personal information from children.

10. International users

We currently serve businesses in the United States. If you use the service from elsewhere, you consent to processing of your information in the United States.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by SMS to active users and posted here with a new effective date.

12. Contact us

Questions or requests: privacy@textmeandgrow.com
SMS: 1-858-398-5975
Mailing address available on request.