Legal

Privacy Policy

Effective date: March 19, 2026 · Last updated: March 19, 2026 · TextHours LLC

1
Overview
Who we are and what this policy covers

TextHours is a product of TextHours LLC, a Nevada limited liability company (“we”, “us”, or “our”). TextHours provides SMS-based time tracking, invoice generation, and contractor payment services for small businesses and their contractors.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data. It applies to all users of the TextHours platform, including employer account holders (“Employers”) and contractors who interact with the system via SMS (“Contractors”).

By using TextHours, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use our service.

2
Information we collect
What data we gather and why

From Employers (account holders): When you create a TextHours account, we collect your name, company name, email address, phone number, and billing information. We also collect configuration data such as pay rates, job codes, and timezone settings that you provide during setup.

From Contractors (SMS users): Contractors interact with TextHours exclusively via SMS. We collect the mobile phone number used to send messages, the content of those messages (for the purpose of parsing hours, expenses, and commands), and derived data such as hours worked, job codes used, and expense amounts.

Automatically collected data: We collect standard server log data including IP addresses, browser type, and access timestamps when you use the TextHours web dashboard. We do not use cookies for advertising purposes.

Bank account information: If you connect a bank account to send ACH payments, your banking credentials and account details are handled exclusively by Plaid. We do not store your full account number or routing number on our servers.

3
How we use your information
The purposes for which we process your data

We use the information we collect to deliver and operate the TextHours service, parse and interpret SMS messages sent by contractors using AI-assisted natural language processing, communicate with you about your account, comply with legal obligations, and improve our service through aggregated analytics.

We do not sell your personal data to third parties. We do not use your data for advertising purposes. We do not share SMS message content with any party other than the third-party processors listed in Section 4, and only to the extent required to deliver the service.

4
Third-party service providers
The vendors we rely on to deliver TextHours — and what data they handle

TextHours is built on several third-party platforms. By using TextHours, you acknowledge that your data may be processed by the following vendors. Each vendor operates under their own privacy policy.

Twilio, Inc.
SMS delivery

All SMS messages sent to and from contractors are transmitted through Twilio's platform. This includes invite messages, hour confirmation replies, expense confirmations, and payment notifications. Twilio processes the phone numbers and message content of all parties in order to deliver these messages.

Twilio Privacy Policy → twilio.com/legal/privacy
OpenAI, LLC
AI text parsing

Inbound SMS messages from contractors are processed by OpenAI's API to parse natural language into structured time entries. The content of SMS messages is transmitted to OpenAI for this purpose. We use OpenAI's API under terms that restrict OpenAI from using submitted data to train models. We do not transmit personally identifiable information such as full names or phone numbers to OpenAI — only the message content.

OpenAI Privacy Policy → openai.com/privacy
Plaid Inc.
Bank account linking

Employers who connect a bank account to send ACH payments do so through Plaid's bank linking interface. Plaid collects and verifies banking credentials on our behalf. TextHours receives only a tokenized representation of the account — we never see or store your actual bank credentials, account number, or routing number. By connecting your bank account, you also agree to Plaid's End User Privacy Policy.

Plaid Privacy Policy → plaid.com/legal/privacy-policy
Stripe, Inc.
Subscription billing

TextHours uses Stripe to process subscription payments for paid plans. Stripe collects and handles your payment card information on our behalf. We do not store card numbers on our servers. Stripe is a PCI-DSS Level 1 certified payment processor.

Stripe Privacy Policy → stripe.com/privacy
Railway Corp.
Infrastructure hosting

The TextHours application and database are hosted on Railway's cloud infrastructure. All application data, including user accounts, timesheet records, and invoice data, is stored on servers managed by Railway. Railway's infrastructure is located in the United States.

Railway Privacy Policy → railway.app/legal/privacy
5
SMS messaging and TCPA compliance
Your rights regarding text messages

TextHours sends SMS messages to contractors only after they have been explicitly invited by their employer and have replied YES to confirm their consent to receive messages. This constitutes express written consent under the Telephone Consumer Protection Act (TCPA).

Contractors may opt out of receiving SMS messages at any time by replying STOP to any TextHours message. Upon receiving a STOP command, we will immediately cease sending messages to that number.

Contractors may reply HELP at any time to receive information about the service and how to contact support.

Message and data rates may apply. TextHours messages are sent via standard SMS. Your mobile carrier may charge standard message and data rates. TextHours is not responsible for carrier charges.

6
Data retention and deletion
How long we keep your data and how to request deletion

Active accounts: We retain your data for as long as your account remains active or as needed to provide services.

Closed accounts: Upon account closure, we delete or anonymize personal data within 90 days, except where we are required to retain records for legal or financial compliance purposes (for example, ACH transaction records may be retained for up to 7 years as required by financial regulations).

SMS message content: The raw text of inbound SMS messages is retained for 12 months to support timesheet auditing and dispute resolution. After 12 months, raw message content is deleted and only the structured timesheet data derived from it is retained.

Deletion requests: You may request deletion of your personal data at any time by contacting us at privacy@texthours.com. We will process deletion requests within 30 days, subject to any legal retention obligations.

7
Your rights
What you can ask us to do with your data

Depending on your location, you may have the following rights: access to your personal data, correction of inaccurate data, deletion of your personal data, portability of your data in a machine-readable format, and the right to opt out of SMS messages by replying STOP.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at privacy@texthours.com.

8
Security
How we protect your data

We implement industry-standard security measures including TLS encryption for data in transit, encryption at rest for sensitive fields, and access controls limiting which employees can access personal data. We use tokenization for financial account data through Plaid and do not store payment card numbers directly.

No method of transmission over the internet is 100% secure. In the event of a data breach affecting your personal information, we will notify affected users as required by applicable law.

9
Changes to this policy
How we'll notify you of updates

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where required, notify account holders by email. Your continued use of TextHours after changes are posted constitutes your acceptance of the updated policy.

Contact us

Company: TextHours LLC

Email: privacy@texthours.com

For data deletion requests, TCPA opt-out issues, or privacy questions — email us and we will respond within 5 business days.