Privacy Policy
Effective October 12, 2026. This policy explains what we collect, why, and the choices you have.
1. Two kinds of people
This policy covers two groups. Account holders are the businesses and their staff who use Twinvia. Contacts are the people our account holders message. For contacts, the account holder is the business that decides why and how their information is used; Twinvia processes it on that business's instructions.
2. What we collect from account holders
Name, email address, phone number, business name and address, password (stored only as a one-way hash), billing details (handled by our payment processor; we never store full card numbers), the content you create, and technical information such as IP address, browser, and the pages you use. We use this to run your account, bill you, support you, keep the Service secure, and send you service notices.
3. What we process about contacts
Whatever the account holder uploads or collects: typically name, email address, phone number, tags, and a record of consent, plus delivery events such as sends, opens, clicks, replies, bounces and opt-outs. We process this only to deliver and report on the account holder's messages, to honor opt-outs, and to keep the legally required records. We never sell contact data and never use it for our own marketing.
4. Consent and opt-out records
We keep a record of how each contact consented and of every opt-out request, because the law requires senders to be able to prove both. These records are kept for the retention period the law sets, even after an account is closed, and are then deleted.
5. Who else sees data
We use a small number of service providers to run Twinvia, each bound by contract to protect the data: our hosting provider, email delivery and mobile-carrier connections used to transmit messages, a payment processor for billing, and artificial-intelligence providers used only to draft campaign text from the material an account holder submits. We do not share data with anyone else except when the law requires it or to protect the Service and its users.
6. Artificial intelligence
When an account holder uses a feature that drafts a campaign from a photo, a voice note or text, that material is sent to an AI provider to produce the draft. The draft is returned to the account holder for review. We do not use account holder or contact data to train AI models.
7. Security
Data is encrypted in transit and stored on servers protected by firewalls, access controls and monitoring. Each account's data is kept in its own separate database. No method is perfect; if a breach affects your data we will notify you as the law requires.
8. Your choices and rights
Account holders can view, change or export their data from the dashboard and can close the account at any time. Contacts can stop messages at any moment by replying STOP to a text or using the unsubscribe link in an email; the request is honored immediately. Residents of California and other states with privacy laws may ask what personal information we hold, request deletion, and opt out of any sale (we do not sell personal information). To exercise a right, write to [email protected]. If you are a contact, we will refer your request to the business that messaged you and help them answer it.
9. Cookies
We use cookies that are needed to keep you signed in and to protect forms. We do not use advertising cookies.
10. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.
11. Changes
We may update this policy and will post the new version here, with notice by email for material changes.
12. Contact
Privacy questions: [email protected].