How we handle your information

Who is responsible

Texa Global Technologies Ltd runs Texa Desk and this website, under the Nigeria Data Protection Act 2023. You can reach us about your data at [email protected].

• We are responsible, as controller, for the account data of the people and companies who sign up for Texa Desk, and for what you send us through this website.
• A business that uses Texa Desk is responsible for the conversations it has with its own customers. For that data we are its processor: we handle it only to run Texa Desk for that business, under a data processing agreement, and the services listed below handle it on our behalf.

If you are the customer of a business that uses Texa Desk, that business decides how your messages are used, so ask it first.

What Texa Desk holds

• Your account: your name, email address, phone number and company, the people on your team, your settings and your top-ups.
• Verification: when a company verifies to unlock more of Texa Desk, the result of each check and the details it gives us, such as NIN, BVN, CAC or RC number and TIN, and any papers it sends us to check by hand. The face check’s selfie is taken by Dikript and never reaches us.
• Conversations: the messages, emails, calls, files and contact details that a business’s customers send on the channels it connects, and the replies from its team and from Texa AI.
• The phone app: a device token so we can send you notifications. The app also keeps copies of the screens you have opened on your phone, so it opens without a network.

You need a name, an email address and a phone number to open an account. Verification is needed only to unlock more of Texa Desk. Accounts are for people aged 18 or over.

Why we use it

• To run Texa Desk for you and your business, which our agreement with you needs.
• To verify companies and keep Texa Desk, WhatsApp and SMS free of fraud and abuse. This is our legitimate interest, and it protects everyone who uses Texa Desk.
• To keep payment records, which the law requires.
• To connect a Google, Meta or Microsoft account and to send notifications to your phone, with your consent. You can withdraw it at any time by disconnecting the account or turning notifications off.
• To answer what you send us through this website, because you asked us to.

For the conversations a business has with its customers, the business decides why the data is used, and we act on its instructions. We never sell any of this data and never use it for advertising.

Outside services

These companies receive data so that Texa Desk can work, and each gets only what its job needs. Several are outside Nigeria, and we use them under their data protection terms.

• WhatsApp Business Platform

  Meta Platforms, Inc., United States

  Data

  Messages, media, phone numbers and WhatsApp profile names of the business’s customers, and the business’s WhatsApp Business Account, phone numbers and message templates.

  Used for

  Receiving and sending the business’s WhatsApp messages, and managing its templates in Texa Desk.

  When

  When a business connects WhatsApp.

• Facebook Login for Business

  Meta Platforms, Inc., United States

  Data

  The Facebook ID and name of the person who connects an account, and the access the business grants.

  Used for

  Connecting the business’s WhatsApp, Facebook Page or Instagram account to Texa Desk.

  When

  When a business connects one of them.

• Messenger and Instagram

  Meta Platforms, Inc., United States

  Data

  Messages, media, names and profile pictures of people who message the business’s Facebook Page or Instagram account.

  Used for

  Showing and answering those messages in Texa Desk.

  When

  When a business connects its Page or Instagram account.

• Sign in with Google

  Google LLC, United States

  Data

  Your name, email address and profile picture, which Google shares with us.

  Used for

  Signing you in to Texa Desk.

  When

  When you choose to sign in with Google.

• Gmail

  Google LLC, United States

  Data

  The emails of the Gmail mailbox a business connects.

  Used for

  Showing the mailbox’s emails in Texa Desk and sending the team’s replies from it, as set out under Google user data below.

  When

  When a business connects Gmail.

• Outlook

  Microsoft Corporation, United States

  Data

  The emails of the Outlook mailbox a business connects.

  Used for

  Showing the mailbox’s emails in Texa Desk and sending the team’s replies from it.

  When

  When a business connects Outlook.

• OpenAI

  OpenAI, United States

  Data

  The text of the conversations Texa AI answers, on any channel and including email from a connected Gmail mailbox, the business’s own knowledge, and the voice notes, images and documents customers send.

  Used for

  Writing Texa AI’s answers, summaries, translations and drafts, transcribing voice notes and speaking the replies to them, and reading images and documents. Under OpenAI’s API terms this data is not used to train its models. OpenAI may keep it for up to 30 days to check for abuse.

  When

  When a business uses Texa AI.

• Spitch and ElevenLabs

  Spitch, Nigeria, and ElevenLabs, Inc., United States

  Data

  The text of Texa AI’s replies on a live voice call.

  Used for

  Speaking those replies to the caller.

  When

  Only on live voice calls that Texa AI answers.

• Deepgram

  Deepgram, United States

  Data

  Call audio.

  Used for

  Transcribing calls. Every request opts out of Deepgram’s model improvement programme, so it doesn’t use this audio to train its models.

  When

  Only on calls that use it.

• Flutterwave

  Flutterwave, Nigeria

  Data

  The business’s name and email address, its payment account number and its payments.

  Used for

  Top-ups of the Texa AI balance by bank transfer.

  When

  When a business tops up.

• Dikript, with its Verifide check

  Dikript, Nigeria

  Data

  NIN, BVN, CAC or RC number, TIN, ID documents and, for the face check, a selfie.

  Used for

  Checking a person’s identity and a company’s registration before more of Texa Desk is unlocked.

  When

  When a company verifies.

• MSG91

  Walkover Web Solutions, India

  Data

  Phone numbers and the text of codes and notices.

  Used for

  Sign-in and phone codes by SMS, and SMS notices and replies.

  When

  When Texa Desk sends a code or an SMS.

• Resend

  Resend, Inc., United States. Our mail is sent from Ireland.

  Data

  Email addresses and the content of each email, which can include message text.

  Used for

  Sign-up, account, ticket and notification emails.

  When

  When Texa Desk emails someone.

• Cloudflare

  Cloudflare, Inc., United States, with a worldwide network

  Data

  All traffic to texadesk.com and its subdomains, including IP addresses.

  Used for

  Delivering Texa Desk and this website, and protecting them from attacks.

  When

  Always.

• Hostinger

  Hostinger International Limited. Texa Desk’s servers are in Frankfurt, Germany, and Texa AI’s engine is in the United Kingdom.

  Data

  Everything Texa Desk stores, including accounts, conversations, files and the database, and what Texa AI’s engine processes.

  Used for

  Hosting Texa Desk and Texa AI.

  When

  Always.

• Firebase Cloud Messaging and Apple Push Notification service

  Google LLC and Apple Inc., United States

  Data

  A device token, and each notification’s title and text.

  Used for

  Notifications on the Texa Desk phone app.

  When

  When the app is installed and you allow notifications.

A business can also connect its own Slack, Linear, Notion, Shopify or TikTok account. Those services receive only what the business chooses to share, under their own privacy policies.

Google user data

Texa Desk’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Gmail data only to show the connected mailbox’s emails in Texa Desk, to send the team’s replies from it and, where the business uses Texa AI on that mailbox, to let Texa AI answer them.
• We pass it on only to the services above that make those features work (Hostinger, Cloudflare and, for Texa AI, OpenAI), or when the law requires it.
• We never use it for advertising and never sell it.
• People at Texa read it only with the business’s permission, for security, or when the law requires it.
• It is not used to train general AI models. Texa AI sends email text only to OpenAI, whose API terms exclude it from training.
• From Sign in with Google we use your name, email address and picture only to sign you in and show who you are in Texa Desk.
• A business can disconnect Gmail at any time by deleting the inbox in Texa Desk, or by removing Texa Desk in its Google Account permissions.

Decisions made automatically

• When a business turns Texa AI on, it answers that business’s customers automatically, within the limits the business sets. A person on the team can take over any conversation.
• The automatic identity check decides whether more of Texa Desk is unlocked. If it doesn’t pass, the company can send us papers, and a person at Texa decides.

How we protect it

Everything is encrypted in transit, secrets and identity numbers are sealed with AES-256-GCM, and each business’s data is kept apart by the database itself. Our security page has the details.

How long we keep it

• A business’s account, conversations and files: while its account is open.
• When a business closes its account: we delete the account and its data within 30 days, and our backups, which we keep for 14 days, lose the last copy after that.
• Verification results, identity numbers and papers: sealed, while the account is open.
• Payment records: six years, as Nigerian tax law requires.
• Complaint records a regulator requires a business to keep: for that regulator’s period, or two years when it sets none, with the customer’s details removed.
• What you send us through this website: as long as we need it to deal with your request and any business that follows.
• The copies the phone app keeps: until you sign out of the app.

A business can also delete one of its customers from Texa Desk, with their conversations, in one action.

When a business sets a retention period, Texa AI deletes its closed conversations, with their messages, transcripts and attachments, once they are older than that period, within about an hour.

Deleting your data

You can ask us to delete your Texa Desk account, or anything we hold about you, at any time.

1. Email us, or write to us through the Talk to us form or the live chat on any page of this site.
2. Say what you want deleted, and give the email address or phone number on your account.
3. We check the request with you, and with the account’s owner for a company account. Then we delete the data and tell you when it is done.

If you are a business’s customer, you can also ask that business directly. If you ask us, we pass your request to it. To disconnect WhatsApp, Facebook or Instagram, a business deletes the inbox in Texa Desk or removes Texa Desk in its Meta business settings.

This website

This website runs no analytics and no advertising trackers, and it sets no tracking cookies. Fonts and images come from our own server, so no font or image service learns that you visited.

If you choose light or dark mode at the bottom of a page, that choice is saved in your own browser and never sent to us.

The “Talk to us” form sends your name, email, and anything else you choose to give (your company, phone and message) to our own Texa Desk account, so our team can reply. We use it only to reply to you and to follow up on your request.

If you use the chat window, your messages go to our Texa Desk account in the same way. The chat window keeps a small identifier in your browser so your conversation continues if you come back.

While you type, our team can see your message before you send it, so they can start on an answer sooner. Long numbers, such as card or account numbers, and anything after words like PIN or password are hidden from that view, and nothing you haven’t sent is kept. The chat also notes roughly where you are (your country, and your city and time zone where available) from your connection, so we can reply at a sensible hour for you.

Your rights

You can ask us for a copy of what we hold about you, in a common format you can take elsewhere. You can also ask us to correct it, limit how we use it or stop using it, and withdraw any consent you gave. Ask in the same way as for a deletion, and we reply within 30 days. If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission.

Changes

When we change this notice, we update the date at the top of this page.