Privacy Policy

Last updated: August 25, 2026

1. Who This Policy Applies To

ZestyText has two types of users:

• Customers — people who buy a plan and create an event
• Subscribers — people who sign up via a customer's link to receive event updates

This policy explains how we handle data for both.

2. Customer Information We Collect

When you create an event, we collect:

• Your email address
• Your event name
• The plan you selected and the amount you paid
• Your IP address and basic technical data when you visit our site
• Stripe payment metadata (we do not see or store your credit card number)

3. Subscriber Information We Collect

When someone signs up through your event's sign-up link or QR code, we collect:

• Their phone number
• The date and time of sign-up
• Their IP address at the moment of sign-up
• The exact consent text they agreed to
• The method used (web link or QR code)
• Which event they signed up for

This data is required by law (TCPA and CTIA rules) to prove valid consent.

4. How We Use Customer Information

• To deliver the service you paid for
• To send you receipts and event-management emails
• To respond to support requests
• To prevent fraud and abuse
• To meet legal and tax obligations

5. How We Use Subscriber Information

• To deliver the event updates the subscriber signed up for
• To respect opt-out requests (STOP, unsubscribe, etc.)
• To maintain consent records as required by federal and state law
• To respond to compliance audits or legal demands if they arise

Subscriber phone numbers are never sold, shared, rented, or used for any purpose outside the event they signed up for.

One thing subscribers should know. The person running the event you signed up for can see your phone number in their ZestyText page, alongside the date you joined. This is how they know who is on their list. They are not permitted to export it, sell it, or use it anywhere outside ZestyText.

6. AI Message Generation and Moderation

When you use our AI message writer or submit a message for sending, the message text is sent to Anthropic (our AI provider) for generation and content moderation. Anthropic does not retain this data for training. Subscriber phone numbers are never sent to AI providers.

7. Data Sharing

We share data only with:

• Stripe — for payment processing
• Notifyre — our SMS carrier, for message delivery
• Anthropic — for AI message writing and moderation (no phone numbers shared)
• Render.com — our hosting provider, where data is stored securely
• Namecheap Private Email — for delivering customer emails (receipts, confirmations)
• Google Analytics — for anonymous website usage data
• Law enforcement / regulators — only when required by valid legal process

We never sell your data. Period.

8. Data Retention

• Subscriber consent records — retained for at least 5 years (required by TCPA)
• Opt-out records — retained permanently (required by law)
• Send records — retained for 7 years (transaction records). This includes a record of which phone numbers a message was sent to, and whether each one was delivered
• Customer accounts — retained for as long as you have active events plus 5 years after closure
• Sign-in links — the link emailed to you works one time and expires within 24 hours. Once used, your signed-in session lasts up to 7 days

9. Subscriber Rights

If you are a subscriber and want to:

• Stop receiving messages — reply STOP to any text. You will be taken off every ZestyText list you are on straight away, and you will not receive anything further. If you later choose to sign up again through a link, that is your decision to make.
• Request deletion of your data — email support@zestytext.com. Note: opt-out records are retained permanently to prevent re-messaging, even after deletion of other data.
• Request a copy of your data — email us with your phone number and the event you signed up for.

10. Security

We use industry-standard security practices: encrypted database storage, HTTPS for all data transmission, password-protected access, and audit logs of all administrative actions. No system is 100% secure, but we take reasonable measures to protect your data.

11. Cookies

We use only essential cookies for authenticated dashboard sessions (logged-in customers) and Google Analytics for anonymous traffic measurement. We do not use tracking cookies or third-party advertising cookies.

12. Children's Privacy

ZestyText is not directed at children under 18. We do not knowingly collect data from minors. If you become aware that a minor has provided us data, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above.

14. Contact

For privacy questions or to exercise any of your rights, email support@zestytext.com.