Skip to content
Legal

Privacy Policy

Last updated September 22, 2026

This policy explains how KiwiTxt (“KiwiTxt”, “we”, “us”) collects, uses, shares and protects personal information, in line with the Privacy Act 2020 (New Zealand).

1. Two kinds of information

  • About our customers: the businesses that use KiwiTxt and their staff. We decide how this is used, and this policy covers it fully.
  • About the people our customers text: their customers. We hold this on behalf of the business that sends the messages and use it only to provide the Service to that business. If you receive a text from a business that uses KiwiTxt, that business is responsible for it, and you can contact them directly.

2. What we collect

  • Account details: names, email addresses, phone numbers, business name and the people given access.
  • Billing: plan and payment status. Payments are processed by Stripe; we do not receive or store full card numbers.
  • Messages and contacts: phone numbers, names, message content, replies and delivery status.
  • Data from connected tools: the details a connected tool sends to trigger a text, for example an order’s number, status, total, customer name and phone.
  • Stripe: if you install the KiwiTxt SMS app in Stripe, we receive your Stripe account ID and name, and the payment events you have texts switched on for (customer name, phone number, amount, currency and invoice links). We do not access or change anything else in your Stripe account.
  • Zapier: if you connect KiwiTxt to Zapier, your Zaps send us the details you choose (such as a phone number, name, tags and message text), and we send Zapier the replies, sent messages and new contacts for the triggers you turn on. Zapier handles that data under its own terms. Revoke your API key in the portal to stop it at any time.
  • Technical information: log-in records, IP addresses and error logs we need to keep the Service secure and working.

3. How we use it

  • To provide the Service: sending and receiving messages, running your connected tools, and showing activity in the portal.
  • To bill you, provide support and tell you about changes to the Service.
  • To keep the Service secure, prevent misuse and meet our legal obligations.

We do not sell personal information, and we do not use the people our customers text for our own marketing.

4. Who we share it with

We share personal information only with service providers who help us run KiwiTxt, and only as needed: payment processing (Stripe), SMS delivery partners and mobile networks, our messaging and customer-management platform, hosting, and email. They may use it only to provide their service to us. We may also disclose information when the law requires it. A current list of our service providers is available on request.

5. Information stored overseas

Some of our service providers store or process information outside New Zealand, including in Australia, the United States and Europe. When we send personal information overseas, we take reasonable steps to make sure it is protected in a way comparable to the Privacy Act 2020.

6. Security

We protect information with measures including encrypted connections, encrypted storage of access tokens and credentials, signed webhook verification, access limited to people who need it, and rate limiting. No system is perfectly secure; if a privacy breach is likely to cause serious harm, we will notify the people affected and the Privacy Commissioner as the law requires.

7. How long we keep it

We keep information while an account is active and for as long as needed to provide the Service. After an account ends, we delete or anonymise its data within a reasonable time, except records we must keep by law (such as tax records).

8. Your rights

You can ask to see the personal information we hold about you and ask us to correct it, by emailing info@kiwitxt.com. We will respond within 20 working days. If you are not satisfied with how we handle a privacy matter, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

9. Stopping texts

If you receive texts from a business that uses KiwiTxt and want them to stop, reply STOP where offered, or contact that business directly. You can also email us and we will pass your request on.

10. Cookies

Our website uses only the cookies needed to keep you logged in and the site secure. We do not use advertising cookies.

11. Children

KiwiTxt is a business service and is not intended for anyone under 16.

12. Changes

We may update this policy. The date at the top shows when it last changed, and we will tell customers about significant changes.

13. Contact

Privacy questions: KiwiTxt · info@kiwitxt.com

Questions about this page? Email info@kiwitxt.com.