Textloop ("Textloop", "we", "us") is a text marketing app for OpoShop stores, published by Found. This policy explains what data we handle and how. Textloop is a tool merchants use to message their own subscribers; the merchant (store owner) is the data controller for their subscribers, and Textloop acts as a processor on their behalf.
Two groups: (1) merchants who install Textloop on their OpoShop store, and (2) subscribers, meaning shoppers who opt in to receive text messages from a merchant's store. Textloop only ever texts subscribers. Order shipping texts also go only to subscribers.
When a merchant connects their store, OpoShop grants Textloop a store-scoped access token. We use it only to read the store's orders and identity to (a) work out which subscribers have ordered and when, (b) send the shipping update and win back texts to subscribers, and (c) manage our own order-update subscriptions. We ask only for the access we need (read orders, read the account identity, manage our own webhooks). We do not change your products, orders or customers. Textloop registers for order updates and can post a notice in your OpoShop admin.
For subscribers, we store the phone number (in E.164 form), the consent record for each opt-in (when and how consent was given, the consent wording and the terms and privacy links shown, the IP address, page and browser the form was submitted from, and the reply of YES that confirmed it), an optional first name or email captured at opt-in, and a record of messages sent (status and number of message segments). Each opt-in, opt-out and resubscribe is kept as a history, so the first proof of consent is not overwritten. Opt-out (STOP) records are kept so that person is not texted again. We keep these because keeping proof of consent is a legal requirement (TCPA). Phone numbers on orders from people who have not subscribed are read to match order history but are not stored. We do not sell, rent, or share subscriber data with third parties, and we do not use it for any purpose other than delivering the merchant's messages.
A text is only ever sent to a phone number with a recorded opt-in. Signing up is confirmed from the phone itself: after the form is submitted, that number is sent one text asking for a reply of YES, and it becomes a subscriber only when that reply arrives within 24 hours. A number that does not reply is not texted again, and is sent that confirmation at most once every 30 days. A number someone typed in without replying YES is kept as an unconfirmed request so it is not asked again, and is never sent marketing. A subscriber can opt out at any time by replying STOP (also UNSUBSCRIBE, CANCEL, END, QUIT). That number then stays blocked until the subscriber texts START, and the merchant cannot undo it for them. Replying HELP returns the store's name and a way to reach it. Replies are handled by Textloop once the merchant has pointed their Twilio number at Textloop. Texts are only sent during the merchant's chosen daytime sending hours, and for US and Canada numbers only when it is also daytime across US time zones.
Messages are delivered through the merchant's own Twilio account. The merchant's Twilio Auth Token is stored encrypted at rest (AES-256-GCM) and is only ever sent to Twilio to authorize a request. It is never returned to any browser or written to logs. Twilio processes the message content and phone number to deliver it; see Twilio's privacy policy.
Textloop does not collect or store card or bank data. The merchant pays Twilio directly for message delivery; Textloop does not bill for SMS.
We collect privacy-preserving product analytics (via PostHog) keyed by an anonymous store identifier. These events contain no personal information: no phone numbers, names, or message content.
Data is stored per-store in our own database, isolated so one store can never see another's data. Consent and send records are retained while the store is active (and as long as needed to evidence consent). When a merchant uninstalls, we mark the store inactive and stop sending. STOP replies are still recorded so nobody is texted again after a reinstall. A merchant may request deletion of their store's data by emailing us.
Merchants and subscribers may request access to, correction of, or deletion of their data by contacting brandon@tryfound.io. Subscribers can also self-serve removal by replying STOP.
Questions about this policy: brandon@tryfound.io (Found).