1. Introduction & Identity
This Privacy Policy describes how Your Brand ("Your Brand," "we," "us," or "our") collects, uses, discloses, and protects information in connection with Your Brand (studio.linxi.app), our SMS and email communication platform. By using Your Brand, you agree to the collection and use of information as described in this policy.
If you have questions about this policy or how your information is handled, contact us at team@linxi.app.
2. Information We Collect
We collect the following categories of information:
- Account information — name, email address, and username when you create a Your Brand account.
- Phone numbers — provided by you or your contacts for the purpose of sending and receiving SMS communications.
- Contact lists — names, phone numbers, and related details uploaded by users to manage their own contacts.
- Message content and communication history — the text of SMS and email messages sent and received through the platform, along with delivery status and timestamps.
- Usage data and analytics — how you interact with Your Brand, including pages visited, features used, and device performance data.
- Payment information — subscription and billing details. Payment card information is processed directly by Square and is not stored on Your Brand's servers.
- Device and browser information — IP address, browser type, operating system, and similar technical data collected automatically.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Your Brand SMS and email communication platform.
- Send messages on behalf of users to contacts who have opted in to receive them.
- Process payments and manage subscriptions through Square.
- Improve the platform, troubleshoot issues, and enhance the user experience.
- Send transactional and account-related emails (e.g. password resets, billing receipts, service notices).
We do not use your information for our own marketing purposes without your explicit consent.
4. SMS and Mobile Messaging
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.
- Phone numbers are collected solely for the purpose of delivering SMS services requested by our users and their contacts.
- Message frequency varies based on user-initiated campaigns and is not fixed or predictable.
- Message and data rates may apply, depending on your mobile carrier and plan.
- You may opt out of receiving further messages at any time by replying STOP to any message.
- For help, reply HELP to any message, or contact team@linxi.app.
- Carriers are not liable for delayed or undelivered messages.
- Consent to receive SMS messages is not a condition of purchasing any product or service from Your Brand.
SMS Communications & Mobile Data
Your Brand (Your Brand) may send SMS text messages to users who have explicitly opted in to receive them. By providing your phone number and checking the SMS consent checkbox during registration or through any other opt-in method, you agree to receive SMS messages from Your Brand.
Data Sharing
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Message Frequency
Message frequency varies based on your account activity and preferences. You may receive account notifications, billing alerts, platform updates, and marketing communications if you have opted in.
Message and Data Rates
Message and data rates may apply. Contact your wireless carrier for details about your messaging plan.
Opt-Out Instructions
You may opt out of SMS messages at any time by replying STOP to any message you receive. After opting out you will receive one confirmation message and no further messages will be sent. To opt back in, reply START.
Help
For help with SMS messages, reply HELP to any message or contact us at team@linxi.app.
Supported Carriers
Your Brand supports all major US carriers including AT&T, Verizon, T-Mobile, Sprint, and others. Carrier support may vary.
5. Google Workspace Data
Connecting a Google account to Your Brand is entirely optional and is a separate act from signing in. Your Brand works fully without it. When you do connect one, Your Brand asks for the permissions below and no others. There are two independent connections, listed separately: Google Workspace, and Google Postmaster Tools.
| Permission (OAuth scope) | What Your Brand does with it |
|---|---|
userinfo.email |
Reads the email address of the Google account being connected, so the app can show you which account is linked. |
calendar |
Creates, updates and deletes the calendar events Your Brand pushes from your marketing calendar, and reads your events so the Your Brand calendar can show them alongside your planned campaigns. Events Your Brand created carry a [linxi-sync] marker and are filtered out when reading, so they are not drawn twice. |
gmail.send |
Sends a message on your behalf when you ask Your Brand to. This is a send-only permission: it cannot read, search or modify anything in your mailbox. |
drive.file |
Creates files in your Drive when you export something, and reads back only those files. This permission is per-file: it can only ever see files this app itself created, never the rest of your Drive. |
spreadsheets |
Writes the spreadsheets Your Brand exports (contact lists, campaign results) and reads back the ones it created. |
documents |
Reads a Google Doc whose URL you paste in, so a campaign brief you have already written can be imported, and writes the documents Your Brand exports. |
Google Postmaster Tools (a separate, optional connection)
Deliverability reporting is its own connection with its own consent screen, asked for only if you press “Connect Google Postmaster Tools”. It is not part of the Google Workspace connection above, and connecting one does not connect the other. Either can be disconnected on its own.
| Permission (OAuth scope) | What Your Brand does with it |
|---|---|
postmaster.readonly |
Reads the aggregate statistics Google publishes for sending domains you have already verified you own in Google Postmaster Tools: reputation, the share of your mail marked as spam, and SPF/DKIM/DMARC pass rates. It is read-only and domain-level: it cannot read, send or see any message, and it reports no individual recipient — there is no per-message or per-person data in this API at all. |
Postmaster figures Your Brand has fetched are cached for six hours so the page does not call Google on every load, and are deleted when you disconnect.
What Your Brand deliberately does not ask for. Your Brand requests no restricted Google scopes — including for Postmaster Tools, whose permission is read-only and carries no access to mail. In particular it does not request gmail.readonly or gmail.modify, so it cannot read your inbox; it does not request contacts, so it cannot read your Google Contacts; and it does not request drive.readonly, so it cannot browse your Drive. If a Google consent screen ever asks you for one of those on Your Brand's behalf, something is wrong and you should decline it.
Limited Use. Your Brand's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: Google user data is used only to provide the features described above; it is never sold; it is never used for advertising; it is never used to train, retrain or improve any generalised or artificial intelligence model; and no human reads it except with your explicit permission, for security purposes, or where required by law.
How Google data is stored. Your Google access and refresh tokens are encrypted at rest, in the same way Your Brand protects carrier API keys. Access tokens are refreshed automatically before they expire; refresh tokens do not expire on their own.
Disconnecting. You can disconnect Google at any time in Account → Integrations. Doing so revokes the grant at Google, deletes the stored tokens, and drops the calendar sync mappings. Files and calendar events already created in your Google account remain there, under your control — they are yours, and Your Brand does not delete them. You can also revoke Your Brand's access directly at myaccount.google.com/permissions.
6. Data Sharing and Third Parties
We do not sell personal data, and we do not share personal data with third parties for their own marketing purposes. We share limited data only with service providers necessary to operate Your Brand:
- Twilio — for SMS message delivery.
- Square — for payment processing.
- cPanel / hosting provider — for infrastructure and email delivery.
- ip-api.com — for approximate geographic location (country, region, city) from the IP address of a visit, used only for aggregate traffic statistics. See Cookies and Analytics below.
Each of these third parties maintains its own privacy policy governing how it handles data on our behalf.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. This applies without exception to every service provider listed above and to any future service provider we may engage.
7. Cookies and Analytics
Your Brand sets a small number of first-party cookies. We do not use third-party advertising cookies, and we do not run any advertising or cross-site tracking network on this site.
- Session cookie — keeps you signed in. Required for the app to work.
- Analytics cookies — a randomly generated identifier that lets us count how many distinct people visit a page and whether a visit is a first or a return. The identifier is random, is not linked to your name or email address unless you are signed in, and is never shared with anyone.
What we measure. For each page view we record the page address, the referring site, your browser, operating system and device type, and an approximate location. We use this only in aggregate, to understand which pages are read and from where.
Approximate location. To work out the country, region and city of a visit, the IP address of the request is sent to ip-api.com, a geolocation service. We do not store your IP address — only the approximate place it resolves to is kept. The result is cached, so a repeat visit from the same address is not looked up again.
Opting out. Browsers that send a Do Not Track or Global Privacy Control signal are not counted, and clearing your cookies for this site removes the identifier. Blocking cookies does not prevent you from using Your Brand.
8. Data Retention
- Account data is retained for as long as your account remains active.
- Message history is retained for 24 months.
- Contact data is deleted within 30 days of account deletion.
- Payment records are retained for 7 years, as required by applicable law.
9. User Rights
You have the right to:
- Access the personal data we hold about you.
- Delete your account and associated data.
- Opt out of SMS messages at any time by replying STOP.
- Opt out of email communications at any time.
To exercise any of these rights, contact team@linxi.app.
10. Security
- Data is encrypted in transit using TLS/SSL.
- Passwords are hashed using bcrypt and are never stored in plaintext.
- Twilio authentication tokens are encrypted at rest.
- We conduct regular security reviews of our systems and practices.
11. Children's Privacy
Your Brand is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email. Continued use of Your Brand after any such changes constitutes your acceptance of the revised policy.
13. Contact
Your Brand
team@linxi.app
studio.linxi.app