Privacy Policy & Terms

For the Send It By Text developer portal and API · Effective August 7, 2026

API Terms of Use

These terms govern your use of the Send It By Text API and this developer portal. By making a request to the API, you agree to them. If you are agreeing on behalf of a company, you confirm you have the authority to bind that company.

These terms supplement, and do not replace, the agreement between Send It By Text and the account holder whose data you are accessing.

Eligibility and access

API access is available to active Send It By Text customers and to developers working on their behalf with their permission. Access is tied to a company account, and every request is made in the context of that account.

If you are a contractor or vendor building on behalf of a customer, the customer remains responsible for how their account and data are used. We may suspend API access for an account that is delinquent, closed, or in violation of these terms.

API keys

Your API key authenticates every request and carries administrator-level authority over your company's data. You are responsible for keeping it confidential and for all activity that occurs under it.

• Make API calls from your own server. Never place a key in a mobile app, browser JavaScript, or any client-side code where it can be extracted.
• Send the key in the apikey request header, never in a query string, where it would be written to server logs and browser history.
• Keep keys out of source control, screenshots, support tickets, and public repositories.
• If a key is exposed or you suspect it has been, rotate it immediately in Company Settings and tell us.
• Do not share a key with anyone who is not authorized to access that company's data, and do not use one customer's key to access another customer's data.

Acceptable use

Use the API to build legitimate integrations for the account that authorized you. You agree not to:

• Send unlawful, harassing, deceptive, or unsolicited messages, or content that violates carrier rules or any applicable law.
• Attempt to access data belonging to accounts other than the one your key is issued for.
• Probe, scan, or test the security of the API, or attempt to circumvent authentication, rate limits, or other controls.
• Scrape or bulk-export data for purposes unrelated to the authorizing customer's own business.
• Resell or redistribute API access itself as a standalone product.
• Use the API in a way that degrades service for other customers.

Rate limits and availability

The API enforces per-IP and per-key rate limits, published in the API reference. When you hit a limit, stop and wait out the cooldown rather than retrying immediately. Design batch jobs to pace themselves and use exponential backoff with jitter.

Repeatedly ignoring throttle responses can result in a key being blocked. We may adjust limits to protect service stability, and we will document changes in the reference.

We aim for high availability but do not guarantee uninterrupted service. Maintenance, provider outages, and incidents happen.

Data you handle

The API gives you access to real contact records, message history, documents, and signature data belonging to a Send It By Text customer. That data belongs to the customer, not to you and not to us as an owner.

• Only request and retain the data your integration actually needs.
• Store it securely, encrypt it in transit and at rest, and restrict access to people who need it.
• Do not log full message bodies, document contents, or personal data in systems without appropriate access controls.
• Delete data you no longer need, and honor deletion requests passed to you by the customer.
• Comply with applicable privacy laws, including GDPR and CCPA where they apply to the data you touch.

If you receive webhook payloads from us, treat every field as untrusted input, validate the request, and make your receiver idempotent.

Messaging compliance

If your integration sends SMS, MMS, or email, you and the account holder are responsible for compliance with the TCPA, CAN-SPAM, carrier requirements, and any other rules that apply.

In practice that means: send only to recipients who have consented, honor opt-outs promptly (a reply of STOP must stop messages), identify the sender, and respect quiet hours and frequency expectations. Do not use the API to bypass an opt-out recorded in the platform.

Changes to the API and these terms

We add endpoints and fields over time. Build defensively: ignore response fields you do not recognize rather than failing on them, and do not depend on the ordering of results unless documented.

If we need to make a breaking change, we will give reasonable notice through the developer portal and to affected accounts. We may update these terms; material changes will be reflected in the effective date at the top of this page.

Warranty and liability

The API and this documentation are provided on an "as is" and "as available" basis, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Code samples in the documentation are illustrative and are not guaranteed to be production ready.

To the maximum extent permitted by law, Send It By Text is not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising out of your use of the API. Nothing here limits liability that cannot be limited under applicable law.

You agree to indemnify Send It By Text against claims arising from your integration, including claims relating to messages you send and data you handle.

These terms are governed by the laws of the State of Florida, without regard to conflict of law principles.

Privacy

The full Send It By Text privacy policy, last updated May 1, 2023, is published at senditbytext.com/privacy-policy-terms-page and is the authoritative version. The summary below covers the points developers ask about most.

What we collect

Through the Send It By Text service we may collect your email address, first and last name, phone number, address, city, state, ZIP code, and bank account information for payments. For identity verification on bank transfers we may request date of birth, a passport or ID, a bank statement, and documentation linking you to an address.

We also collect usage data automatically, including IP address, browser type and version, pages visited with time, date and duration, mobile device type and identifiers, and diagnostic and interaction data.

Cookies

We use session cookies, which are deleted when you close your browser, and persistent cookies, which remain afterward. They fall into necessary cookies that enable core functionality, cookies that record your acceptance of policies, functionality cookies that remember your preferences, and tracking or performance cookies used for analytics and ad testing through third parties.

How we use it

We use your data to provide and maintain the service, manage your account and registration, fulfill our contract with you, contact you by email, SMS, or notification, send offers and similar service information, and manage your requests.

Third parties

Google Analytics provides usage tracking and reporting and may share data within the Google Ads network; you can opt out with Google's browser add-on. Payments are handled by Stripe, PayPal, and Authorize.net, each under its own privacy policy. You can opt out of email marketing through the unsubscribe link or by contacting us, and out of SMS marketing by replying STOP.

Retention, transfer, and disclosure

We retain personal data only as long as needed, though usage data may be kept longer for legal or functional reasons. Data may be transferred to and processed in other jurisdictions, secured by commercially acceptable means. We may disclose data in connection with a merger or acquisition, with notice, and where required to comply with law or to protect the rights and safety of the public or our users.

Your rights

Under GDPR you have the right to access, update, or delete your data, request correction, object to processing (particularly for marketing), request data transfer, and withdraw consent. Under CCPA you have the right to be notified of collection, to request access to and deletion of your data, to know the categories, sources, and purposes of data use, to opt out of any sale of personal information, and to be free from discrimination for exercising these rights.

We do not sell personal information. You can opt out through the cookie consent banner, the "Do Not Sell My Info" link, or your mobile device settings. California residents may request information about data shared for marketing once per year under the Shine the Light law.

Children

We do not knowingly collect data from anyone under 13.

Security and external links

We use best efforts to protect your data, but no method of transmission or storage is 100% secure. We are not responsible for the content or privacy practices of external sites we link to.

Changes

We will post any changes to the privacy policy on the main site and notify you by email or a prominent notice on the site.

Contact

Questions about these terms, the API, or your data:

• Developer support: contact form or api@senditbytext.com
• Phone: (800) 800-4045, Monday through Friday, 10:00 AM to 6:00 PM Eastern
• Mail: 5201 W Kennedy Blvd Suite 925, Tampa, FL 33609