TextUs.Biz Privacy Policy

TextUs.Biz’s Privacy Policy is designed to help you understand the collection, use, and disclosure of personal information that may be collected by TextUs.Biz anytime you interact with TextUs.Biz websites, applications, and services (referred to collectively as the “Services” in this document). Your personal information and privacy is a priority at TextUs.Biz and we go to great lengths to ensure it is protected both internally at TextUs.Biz and with any partners or affiliates we do business with. By using or accessing TextUs.Biz either directly or through one of our partner or affiliates, you are accepting the practices described in this Privacy Policy. Please take a few moments to read this policy and learn more about the type of information gathered and how we use it.

Information Collected and Why

As is true of most websites, we gather certain information automatically and store it in log files. This information includes Internet Protocol (IP) addresses, browser type, operating system, date/time stamp, and clickstream data. We use this information, which does not identify individual users, to analyze trends, to administer the site, to track user movements around the site and to gather demographic information about our user base as a whole. This information is gathered for all visitors. In addition, we store certain information from your browser using “cookies.” A cookie is a piece of data stored on the user’s computer tied to information about the user. This allows our server to recognize your computer and any settings you created on our sites. It restores those settings so you don’t have to enter the same information every time you visit. We use session ID cookies to confirm that users are logged in and keep you logged in until you log out. By default, we use a persistent cookie that stores your login ID and password to make it easier for you to login when you return to use the TextUs.Biz service. You can remove or block this cookie using the settings in your browser if you want to disable this convenience feature. When using TextUs.Biz you may sign up and setup your account, send messages, create contacts, and receive messages. We retain this information so that, for instance, you can return to view prior messages you have sent or easily see your Contacts. When you update information, we usually keep a backup copy of the prior version for a reasonable period of time to enable any legal audits of that information. We use personal information about you such as mobile phone number and name to validate your identity and protect other TextUs.Biz users against spam. We ask for you to identify your mobile device because this helps us to build the TextUs.Biz mobile ecosystem enabling us to offer you future enhanced services. Your email address enables us to contact you with Service updates and administrative notices by means other than your mobile device. Other information we collect such as your location, birthday, etc. are used so that we can deliver a superior level of customer service and present you with applicable offerings. We collect information regarding customer activities on our websites to determine how best to improve our Services.

Security

“At TextUs.Biz, nothing is more important to our company than the privacy of and integrity of our customer’s data.” – Ted Guggenheim, CEO

TextUs.Biz takes precautions including administrative, technical, and physical measures to safeguard your personal information against loss, theft, and misuse, as well as unauthorized access, disclosure, alteration, and destruction.

The TextUs.Biz web application and database is a cloud-based, service hosted on Saleforce.com’s, Heroku Cloud Application Service. As a Heroku customer our application and customer data is protected using the following Security Assessments and Practices:
Penetration Testing and Vulnerability Assessments
Third party security testing of the Heroku application is performed by independent and reputable security consulting firms. Findings from each assessment are reviewed with the assessors, risk ranked, and assigned to the responsible team.

Physical Security

Heroku utilizes ISO 27001 and FISMA certified data centers managed by Amazon. Amazon has many years of experience in designing, constructing, and operating large-scale data centers. This experience has been applied to the AWS platform and infrastructure. AWS data centers are housed in nondescript facilities, and critical facilities have extensive setback and military grade perimeter control berms as well as other natural boundary protection. Physical access is strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, state of the art intrusion detection systems, and other electronic means. Authorized staff must pass two-factor authentication no fewer than three times to access data center floors. All visitors and contractors are required to present identification and are signed in and continually escorted by authorized staff.

Amazon only provides data center access and information to employees who have a legitimate business need for such privileges. When an employee no longer has a business need for these privileges, his or her access is immediately revoked, even if they continue to be an employee of Amazon or Amazon Web Services. All physical and electronic access to data centers by Amazon employees is logged and audited routinely. For additional information see: https://aws.amazon.com/security

Data Encryption

Continuous Protection is designed to keep your data safe, secure, and available. With the launch of Heroku Postgres DbX, Continuous Protection is gaining encryption-at-rest on all databases.
Continuous Protection also keeps your database available. By performing 20 diagnostics health checks to your database every 30 seconds, Continuous Protection monitors that your database is up and running to meet your applications’ needs. And if a diagnostic should fail then our automated systems repair the database, automatically.

Finally, Continuous Protection keeps your data secure. These safety measures include paranoid system configurations, automatic security patch application (often before exploits are publicly announced), regular intrusion tests, required enforcement of impossible-to-guess database credentials, and required SSL-encrypted connections from all outside clients.

By encrypting data-at-rest allows Heroku Postgres to comply with the most stringent security requirements. In the exceedingly unlikely event of a physical breach of our underlying infrastructure (i.e., if someone broke into the datacenter and removed the disk drives), your data would remain safe and secure.

For any additional information on our security practices please feel free to reach out to Ted Guggenheim CEO ted@textus.biz or our CTO Mike Hickman directly mike@textus.biz.

Disclosure of Information

TextUs.Biz takes your privacy and data extremely serious. We do not access, sell or rent your contact information to anyone. To make sure your personal information is secure, we communicate these guidelines to TextUs.Biz employees and strictly enforce privacy safeguards within the company. We ensure only authorized legal personnel have access to message data. Other personal information is available for authorized TextUs.Biz employees for the purpose of troubleshooting support requests. We make your mobile device type available to other TextUs.Biz users that have entered your mobile number as a contact. You may set your preferences for sharing your mobile device on the Settings Window.

There are times when it may be advantageous for TextUs.Biz to make certain personal information about you available to companies that TextUs.Biz has a strategic relationship with or that perform work for TextUs.Biz to provide products and services to you on our behalf. These companies are also obligated to protect your personal information in accordance with TextUs.Biz’s policies.

We may be required to disclose user information pursuant to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. We do not reveal information until we have a good faith belief that an information request by law enforcement or private litigants meets applicable legal standards. Additionally, we may share account or other information when we believe it is necessary to comply with law, to protect our interests or property, to prevent fraud or other illegal activity perpetrated through the TextUs.Biz service or using the TextUs.Biz name, or to prevent imminent bodily harm. This may include sharing information with other companies, lawyers, agents or government agencies.

Terms of Use, Notices, and Revisions

TextUs.Biz may update its privacy policy from time to time. When we change the policy in a material way a notice will be posted on our website along with the updated privacy policy. We encourage you to refer to this policy on an ongoing basis so that you understand our current privacy policy. Unless stated otherwise, our current privacy policy applies to all information that we have about you and your account.As is true of most websites, we gather certain information automatically and store it in log files. This information includes Internet Protocol (IP) addresses, browser type, operating system, date/time stamp, and clickstream data. We use this information, which does not identify individual users, to analyze trends, to administer the site, to track user movements around the site and to gather demographic information about our user base as a whole. This information is gathered for all visitors. In addition, we store certain information from your browser using “cookies.” A cookie is a piece of data stored on the user’s computer tied to information about the user. This allows our server to recognize your computer and any settings you created on our sites. It restores those settings so you don’t have to enter the same information every time you visit. We use session ID cookies to confirm that users are logged in and keep you logged in until you log out. By default, we use a persistent cookie that stores your login ID and password to make it easier for you to login when you return to use the TextUs.Biz service. You can remove or block this cookie using the settings in your browser if you want to disable this convenience feature. When using TextUs.Biz you may sign up and setup your account, send messages, create contacts, and receive messages. We retain this information so that, for instance, you can return to view prior messages you have sent or easily see your Contacts. When you update information, we usually keep a backup copy of the prior version for a reasonable period of time to enable any legal audits of that information. We use personal information about you such as mobile phone number and name to validate your identity and protect other TextUs.Biz users against spam. We ask for you to identify your mobile device because this helps us to build the TextUs.Biz mobile ecosystem enabling us to offer you future enhanced services. Your email address enables us to contact you with Service updates and administrative notices by means other than your mobile device. Other information we collect such as your location, birthday, etc. are used so that we can deliver a superior level of customer service and present you with applicable offerings. We collect information regarding customer activities on our websites to determine how best to improve our Services.