Sam Privacy Policy

1. Who We Are and Who This Covers

Sam is a text messaging service offered by Xecute (“Xecute,” “we,” “us,” or “our”). This policy explains how we handle personal information in connection with Sam, for two groups of people:

• Businesses that sign up for Sam, and the owners and team members who use it (“Customers”); and
• People Sam texts on a business’s behalf, such as that business’s customers and leads (“Contacts”).

For Contacts, Sam acts on behalf of the business that texted you. That business decides whom to text and why, and its own privacy policy also applies. Xecute processes Contacts’ information as that business’s service provider. Use of Sam by businesses is also governed by the Sam Terms of Service.

2. What We Collect

• Account information: the business’s legal name, EIN, address, and website; the owner’s name, email address, and cell phone number; team members’ names and phone numbers; sign-in codes; and the settings and business information the Customer gives Sam (services, prices, hours, and similar).
• CRM data: information Sam reads from, or writes to, the Customer’s CRM (such as Markate or Jobber), including customer names, phone numbers, email addresses, service addresses, estimates, jobs, invoices, and notes.
• Message contents: the text messages, photos, and other content exchanged between Sam and Contacts, and messages between Sam and the Customer’s team.
• Phone numbers: the numbers Sam texts and receives texts from, and the Customer’s texting number.
• Delivery metadata: when messages were sent and received, delivery status, carrier error codes, and opt-out and opt-in records.
• Carrier registration information: the business details carriers require to register the Customer’s brand and messaging campaign.
• Consent records: when a Customer accepts the Sam Terms of Service or confirms customer permission for a campaign, we record the time, the version accepted, the IP address, and the browser.
• Usage and device information: IP address, browser type, pages visited, and server logs, and a cookie that keeps you signed in. Some pages load fonts from a font service, which receives your IP address. We do not use advertising or cross-site tracking cookies.
• Payment information: handled by our payment processor. We do not store full card numbers.

3. Why We Use It

• To provide Sam: sending and answering texts for the business, following up on estimates, running campaigns the business starts, keeping the business’s CRM up to date, and letting the business’s team know when a person is needed.
• To register the business with carriers so it can text, and to deliver messages.
• To honor opt-outs and keep records of consent.
• To support, secure, troubleshoot, and improve Sam for the Customer, and to prevent fraud, abuse, and unlawful messaging.
• To bill for the service and communicate with Customers about their accounts.
• To comply with the law and enforce our terms.

Sam’s replies are written by automated systems using language models provided by third parties. We send those providers only what is needed to write each reply. We do not use Customer or Contact information to train language models.

4. How We Share It

We share personal information only with the service providers that help us run Sam, and only what each needs:

• cloud hosting providers that run our servers and databases;
• SMS carrier connectivity (Twilio) and the wireless carriers, which carry messages and handle carrier registration;
• our language model provider, which writes Sam’s automated replies;
• the Customer’s own CRM (such as Markate or Jobber), through Xecute’s connection to it; and
• our payment processor (Stripe).

We may also disclose information when the law requires it, to protect the rights and safety of people or of Xecute, or as part of a merger, acquisition, or sale of assets, subject to this policy.

We never sell personal information, and we do not share it for cross-context behavioral advertising.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties.

5. Text Messages

If a business texts you through Sam, you can reply STOP at any time to stop receiving texts from that business, and HELP for help. Message and data rates may apply. Message frequency varies. Each business also publishes its own SMS terms and privacy page.

6. How Long We Keep It

We keep conversation and customer records while the Customer’s account is active. When an account ends, we delete that account’s data within 90 days, except where the law requires us to keep it longer, and except records of opt-outs, which we keep as long as needed to honor them. Copies in routine backups are deleted as those backups roll off. A Customer can ask for an export of its data before it is deleted.

7. How We Protect It

We use reasonable technical and organizational measures to protect personal information, including encryption in transit and access controls. Only authorized personnel can reach Customer data, only to provide, support, or fix Sam, and that access is role-restricted and logged. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on where you live (for example, in California under the CCPA), you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale or sharing (we do not sell or share it for advertising). We will not discriminate against you for using these rights.

To make a request, email support@xecutetech.com. We will verify your request, and someone you authorize may make it for you. We respond within the time the law requires (generally 45 days). If you are a Contact, we may pass your request to the business that texted you, since that business controls your information, and we will help it respond. To stop texts, reply STOP.

9. Children

Sam is for businesses and is not intended for anyone under 18. We do not knowingly collect personal information from children under 13 through Sam. If you believe we have, contact us and we will delete it.

10. Where We Process It

Sam is operated from the United States, and information is processed in the United States and wherever our service providers operate.

11. Changes to This Policy

We may update this policy. We will post the new version on this page and update the “Last Updated” date and version, and for material changes we will make reasonable efforts to tell Customers in advance, for example by email or in Sam.

12. Contact

Questions about this policy or your information: support@xecutetech.com.