Privacy Policy

Last updated: January 2026

Who we are

Whitepath Ltd is a UK-based company providing a missed call recovery platform for small businesses. We are registered with the Information Commissioner's Office (ICO). For any privacy-related enquiries, contact us at privacy@texalo.co.uk.

What data we collect

We collect the following categories of personal data:

• Account data: Your name, email address, business name, and business phone number when you sign up.
• Billing data: Payment information is processed directly by Stripe. We store only your Stripe customer ID — we never see or store full card details.
• Call and SMS data: Phone numbers of callers who reach your Texalo number, and the content of SMS conversations that occur through the platform.
• Usage data: Information about how you use the dashboard, including login times and feature usage.

How we use your data

We use your data solely to provide and improve the Texalo service. Specifically:

• To operate the missed call SMS platform on your behalf
• To display conversation history in your dashboard
• To send you service notifications (e.g. payment failure alerts)
• To improve our AI response quality

We do not sell your data. We do not share it with third parties except as necessary to provide the service (Twilio for SMS delivery, Anthropic for AI processing, Stripe for payments).

Your role as data controller

When using Texalo to handle communications with your customers, you are the data controller for your customers' personal data. Texalo acts as your data processor. You are responsible for ensuring you have a lawful basis to forward calls to our service and for informing your customers about how their data is handled.

Data retention

SMS conversation messages are retained for 90 days, after which they are automatically deleted. Account data is retained for the duration of your subscription plus 30 days after cancellation. You may request earlier deletion by contacting us.

Data security

All data is encrypted in transit using TLS 1.2 or higher. Your account password is hashed using bcrypt. We conduct regular security reviews of our infrastructure.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability

To exercise any of these rights, contact privacy@texalo.co.uk. We will respond within 30 days.

Cookies

We use a single authentication cookie to keep you logged in. This is strictly necessary for the service to function. We do not use advertising or tracking cookies.

Contact

Whitepath Ltd — privacy@texalo.co.uk