Privacy

H2N LLC, doing business as Sunny · Effective 20 October 2026 · Version 2.2

Sunny is an assistant you reach by text message. That means almost everything it knows, you told it. This page says what is kept, what is thrown away, who else sees it, and how to make it stop.

Who we are

Sunny (also called TextSunny) is operated by H2N LLC, a Wyoming limited liability company. You can reach a person at henry@textsunny.com, and that is the right address for any question or request on this page.

Mailing address: H2N LLC, 30 N Gould St, Ste N, Sheridan, WY 82801.

What we collect

What you text us

The content of the messages you send and the replies Sunny sends back. This is the substance of the product, so it is kept.

What we build from those messages

Sunny reads your messages and keeps structured records so it can be useful later: contacts and clients, properties and transactions, deadlines and contingency dates, drafted replies awaiting your approval, expenses you report, your appointments, the daily list you send it and what you have ticked off, the people you said you would follow up with, and general facts you have told it about how you work.

When you sign up and pay

You start a trial through a checkout page run by Stripe, our payment processor. Stripe collects your name, email, mobile number, and card and billing details. We never see or store your full card number. We receive and keep your mobile number (it is how your account is made and how Sunny knows it is you), your email, which plan you chose, whether you pay monthly or yearly, your trial end date, your subscription status, the referral or invite code you used, and the ids Stripe gives your customer record and subscription. Your account page shows your card type and last four digits, which it reads from Stripe.

Your account at textsunny.com/account

You manage your plan, card, invoices and email at textsunny.com/account. You sign in with a six-digit code that Sunny texts to your own Sunny thread, a code sent to your email, or Google. Signing in with Google asks Google only for your name, email address and a sign-in id (the openid, email and profile permissions), and only signs in an account that already has that email; it never creates one. Codes work once and expire after 10 minutes, and we store them only in a scrambled form. We keep a record of sign-ins, sign-outs and plan, card and cancel actions, so you can see the devices signed in and sign out everywhere. The account page shows your plan, billing and account details, the accounts you have connected, and, in its Memory tab, what Sunny remembers about your business, with a way to download it all or delete your account. Your conversations are never shown there.

Who can read your messages

No person at Sunny reads your messages. There is no screen, tool or setting that lets anyone on our team open your conversation with Sunny. There are three exceptions, and in each you know it is happening:

• A bug report you approve. If something goes wrong, Sunny writes a short report: what you were trying to do, what Sunny did, what went wrong and what you expected, with client names, phone numbers, addresses, email addresses and amounts taken out. It shows you the report and asks whether to send it to the team. It is only sent if you say yes, and what the team receives is exactly what you read.
• A reply to the Sunny team. The team sometimes texts you from the Sunny line, always starting “From the Sunny team”. If you reply within 48 hours, Sunny tells you in the thread that it passed your reply on, and that reply is the only other thing of yours the team sees.
• An automated nightly check. Once a night, a computer program reads the previous day of your conversation with Sunny to spot where Sunny got something wrong, such as a wrong date or a task it said it did but didn't. No person reads your conversation. What the team sees is a short note about Sunny's mistake, like “said a showing was booked but never added it to the calendar,” with names, phone numbers, email addresses, addresses, amounts and your words removed. It uses the same AI provider that writes Sunny's replies, under the same terms, and is never used to train AI.

To run the service and your subscription, the team can see account-level facts, never the words: your name, your phone number (shown masked unless there is a reason to reveal it, and every reveal is recorded), your email, who invited you, your plan and trial status, when you were last active, how many messages you sent, which features you used and what they cost us to run.

Your data is yours

Sunny keeps your conversation so it remembers context, along with what it has learned about your business: your contacts, deals, dates, notes and how you like to work. It keeps them until you tell it otherwise. You can manage all of it, any time:

• Ask “what do you know about me?” or “what do you know about Tina?” and Sunny lists what is on file.
• Say “forget everything about Tina” and Sunny shows you what will be removed and asks you to confirm. On yes, it deletes her contact and everything it learned about her, and takes her name, email and phone number out of everything else it keeps. Deals and expenses she was part of stay, without her name on them.
• Say “clear my chat history” and, once you confirm, Sunny erases the text of your messages so far. What it learned from them stays, so it still knows your business.
• To download a copy of everything, or to delete your account and everything in it, go to textsunny.com/account, open Memory, then Your data. If you text “export my data” or “delete my data”, Sunny sends you that address. The steps are under Deleting your data.

Sunny never permanently deletes anything in your accounts. When you ask, it moves an email or a Drive file to the trash, deletes a Google Task, or cancels an event you made through it, and only after you answer yes to a question naming exactly what will change. Gmail and Drive keep trashed items for 30 days. Removed information is gone from Sunny right away; encrypted copies in our backups expire within 90 days.

Screenshots, documents and voice notes

When you send a screenshot or a photo of a document, Sunny reads it, takes what the record needs, and discards the image in the same request. It is not written to disk and not kept by us. What survives is the text it read and the records built from it.

Voice notes are transcribed, and the audio is discarded the same way. What survives is the text.

Your own listing photos and brand

There is one kind of picture Sunny does keep, because you send it to be kept: photos of a property you are marketing, your headshot, your brokerage logo, and your own post overlay, sent so Sunny can make listing posts and documents for you to publish. They are stored in your account only. Listing photos are deleted automatically 30 days after you send them. Your logo, headshot and overlay are kept until you tell Sunny to remove them (for example, “remove my overlay”) or delete your account. A screenshot of a conversation, inbox, portal, CRM or document is never kept this way, whatever its caption says.

What we do not have

Your other text conversations, your contacts, or anything on your phone you did not send to Sunny. Forwarding one message does not give Sunny the rest of that conversation. Accounts you connect are the one exception, and only if you connect them: see the next section.

Accounts you connect

If you connect Google, we hold the access tokens that let Sunny act on your behalf in the Google services you agree to on Google's screen: Gmail, Calendar, Contacts, Drive, Docs, Sheets and Tasks. Sunny uses each of them only when you ask for something that needs it: your mail and drafts, your calendar, a contact you look up, a document or sheet it writes for you, a file it finds, a task it keeps. In Gmail, Sunny reads the messages that match what you asked about (sender, subject, date, a short preview, and the full text or attachment of one you ask it to read), and writes your client emails into your own Drafts folder for you to read and send yourself; Sunny does not send email from your account unless you have separately asked us to switch that on. It keeps only what the record needs, the same way it treats a screenshot, and does not keep copies of your mail. Tokens are stored encrypted, and are deleted when you disconnect. To disconnect, text Sunny “disconnect my Google”, or remove Sunny at myaccount.google.com/permissions; either way Sunny loses access and the tokens are deleted.

In Gmail, when you ask, Sunny labels, archives and marks mail read or unread, sets up rules that add a label to mail from a sender you name, and ends its drafts with your own Gmail signature. It moves mail to the trash only after you answer yes. It never forwards mail or sets up an auto-reply. In Google Drive, when you ask, Sunny finds and reads your files, moves and renames them, makes folders, and adds to a Doc or Sheet of yours. It shares a file only with one person you named, view-only unless you say otherwise, and never “anyone with the link”; sharing a file you made, or moving one to the trash, happens only after you answer yes. In Google Calendar, it checks when you are free across all your calendars, and creates calendars and events when you ask. In Google Contacts, it looks people up, saves new contacts, fills in empty fields and adds labels; it replaces an existing phone number or email only after you answer yes. It can also search “Other contacts” (people you have emailed but never saved) and reads that address back to you before using it anywhere. In Google Tasks, it adds, lists, completes and edits your tasks, and deletes one only after you answer yes.

Two more things Sunny does with Google, both only because you asked: when you name a guest for a meeting, Sunny puts the event on your calendar with that guest and Google sends the invitation from you; and when a new-lead email arrives from a listing site or your website form, Sunny turns it into a contact and a follow-up for you. From Gmail we keep message ids, the time we last looked, the notes Sunny writes from a lead email, and the drafts Sunny wrote for you (with the id of the copy in your Drafts folder). We do not store your messages. From Calendar we keep the ids of the events Sunny created for you. For every change Sunny makes in your Google account we keep a record of what changed (the file, email or task ids, the label or subject, who a file was shared with) and the text you sent that asked for it. When you ask Sunny to read a file in your Drive, the text it read is kept for 30 days, with Social Security and bank numbers removed, and the file itself is not kept. We also keep the ids of the folders and files Sunny made for you.

We use Google data only to provide the features you use in Sunny. We never use it for advertising, never sell or transfer it, never use it to train AI, and no person at Sunny reads your mail, calendar, files, contacts or tasks, except when we are required to by law or are investigating abuse or a security problem. Sunny's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Follow Up Boss. You connect Follow Up Boss with a tap: text Sunny “connect follow up boss” for a link, or press Connect on the Connections tab at textsunny.com/account, and approve Sunny on Follow Up Boss's own page. Its tokens are stored encrypted. Sunny never asks for your API key. If you paste one into a message anyway, it is taken out of the message before the message is saved, checked with Follow Up Boss, and stored encrypted. Sunny then sends the leads, contacts, follow-ups, showings and showing notes it picks up into your Follow Up Boss account, and brings in the people, notes and appointments you add there. Text “disconnect follow up boss”, or press Disconnect on the Connections tab, and Sunny deletes its copy of the tokens or key and, where you connected with a tap, asks Follow Up Boss to remove its access. What is already in Follow Up Boss stays there.

QuickBooks. Only if you connect it, Sunny uses it to log the expenses you ask it to log, to read your expense categories, and to read the expenses in your books when you ask what you have spent. Its tokens are stored encrypted and deleted when you disconnect. Text “disconnect quickbooks” to disconnect; what is already in QuickBooks stays there.

Instagram and Facebook. Only if you connect them, Sunny posts the listing posts you approve to your Facebook Page and to the Instagram professional account linked to it. You connect both with one Facebook login. Sunny asks Facebook for the list of Pages you manage and, for each Page, the id and username of the Instagram account linked to it. It uses them to publish the post you approved, with its photos and caption, and then to read back the link to the live post. It never reads your comments, followers, insights, messages or other posts, and it never edits or deletes a post. We keep the access tokens, stored encrypted; the id and name of each Page and the id and username of its Instagram account; and a record of each post: its photos for 14 days, and its caption, your approval and when you gave it, and the post's id and link for as long as you have an account.

TikTok. Only if you connect it, Sunny posts the listing posts you approve to your TikTok account as photo posts. Sunny asks TikTok for your display name and username and, before each post, which privacy options your account offers and whether your comments are turned off, so the post Sunny shows you matches what TikTok will do. It uses them to publish the post you approved and to check that it went up. It never reads your comments, followers, analytics, messages or other videos, and it never edits or deletes a post. We keep the access tokens, stored encrypted; your TikTok account id, display name and username; and the same record of each post as for Instagram and Facebook.

Disconnecting Instagram, Facebook or TikTok. Text Sunny “disconnect instagram” (this covers Instagram and Facebook together) or “disconnect tiktok”, or press Disconnect on the Connections tab at textsunny.com/account. Sunny asks the platform to remove its access, deletes its copy of the tokens and the account details above, and cancels any post still waiting to go out. Posts already published stay on your account. You can also remove Sunny in the platform's own settings: on Facebook, Settings, then Business Integrations; on Instagram, Settings, then Website permissions, then Apps and websites; on TikTok, Settings and privacy, then Security and permissions, then Apps and services. See Deleting your data for what that does.

Operational records

Your phone number, when you signed up, and basic logs of what the system did and when, which is how we find out why something broke. Our web servers log each request to them, including the IP address, with sign-in links, codes and other secrets in addresses removed from the log.

This website

This site runs no analytics and embeds no trackers or advertising. It is hosted by Vercel, and its fonts load from Google Fonts, so those two companies receive the ordinary details your browser sends when it loads a page, such as your IP address. If you fill in the waitlist form, we get what you typed (name, email, market, and the answers to a few short questions about your business) and nothing else. It is kept in our database, and we send you a short email to say you are on the list.

Cookies

The marketing pages of textsunny.com set no cookies. Your account at textsunny.com/account uses only cookies it needs to work:

• A session cookie that keeps you signed in. It lasts up to 2 hours, or up to 30 days of use (180 days at most) if you tick “Keep me signed in”.
• Short-lived sign-in cookies that tie a code, or a sign-in with Google, to the browser that started it.
• A signed-in hint, sunny_signed_in=1, set on textsunny.com so the site can show “Open Sunny” instead of “Log in”. It holds nothing about you and opens nothing.

There are no advertising or tracking cookies. Stripe's checkout page sets its own cookies to prevent fraud, under Stripe's privacy policy.

Your clients' information

This one deserves its own heading, because it is the part people forget. When you forward a client's message or screenshot a thread, you are handing us information about somebody who never agreed to anything with us. We treat it as yours, held on your behalf, and we do not use it for anything except answering you.

Social Security numbers, taxpayer ID numbers, bank account and routing numbers, and card numbers are never stored. If one is in a message, a PDF or another document you send, Sunny removes it before anything is kept, tells you it did, and works from the rest.

You are responsible for having the right to share it in the first place, and for whatever your licence, your brokerage and your local law require of you. If a client asks you to have their information removed, tell Sunny to forget them, or email us and we will remove it.

How we use it

Only to run Sunny for you: to answer and act on your messages, to remember your business, to send the reminders and briefs you asked for, to run your account and subscription, to keep the service secure and find out why something broke, and to meet legal obligations. We never sell your information, never share it for advertising, and never use it to train AI.

Who else sees it

Sunny cannot work without a few other companies. Each one gets only what it needs to do its job.

Those are the only companies that touch it, and each one only for the job named above. Each keeps its own operational logs under its own terms for a limited time, which we do not control; none of them is permitted to use your information for anything but the job named. Your information is not sold, rented, or shared with advertisers.

If someone invited or referred you to Sunny, they can see your first name and whether you are a paying subscriber, and nothing else.

We would disclose information to a court or authority only when the law requires it. If H2N LLC is ever sold or merged, your information would move with Sunny under this policy, and we would tell you first.

Security

• Independent security assessment. Because Sunny can work in Gmail and Drive, Google requires an independent security assessment (CASA). Ours is carried out by TAC Security, an authorized assessment lab.
• Each account kept apart by the database itself. Every realtor's data is isolated by row-level security that the application cannot switch off, rather than by a setting in the code that somebody could get wrong. One realtor's deals, contacts and messages are not reachable from another's.
• Encryption. Data is encrypted in transit. Connected-account tokens and keys are encrypted in the database, and backups are encrypted before they leave the server.
• Secrets in a managed store. Our service keys live in Google Cloud Secret Manager, loaded into memory when a server starts, not in files on the server.
• Numbers we refuse to keep. Social Security, taxpayer ID, bank account, routing and card numbers are removed before anything is stored, and the database removes them again on the way in.
• Screenshots are read and discarded. Only your own listing photos and brand images are kept, as described above.
• Few people, little access. Access is limited to the people who need it to run the service, and nobody at Sunny can read your messages.

No system is perfect, and we would rather say that than imply otherwise. If we ever lose control of your data we will tell you.

How long we keep it

• Screenshots, pictures of documents and voice audio: not kept at all.
• Listing photos: 30 days, or sooner if you ask.
• Your logo, headshot and overlay: until you remove them or delete your account.
• Messages and the records built from them: for as long as you use Sunny, unless you ask Sunny to forget something or clear your history sooner.
• After you stop: if your subscription ends or you ask us to close your account, we keep your account for 30 days so an accidental cancellation is recoverable, and then delete it. Deleting your account at textsunny.com/account deletes it at once.
• Social Security, bank account, routing and card numbers: never stored.
• Text of a Drive file you asked Sunny to read: 30 days.
• Your data download: made when you ask for it and sent straight to your browser. We keep no copy.
• Photos of a social post: 14 days after the post is made.
• Social post records (the caption, your approval and when you gave it, and the post's id and link): for as long as you have an account.
• Sign-in codes: 10 minutes.
• Billing records: invoices and payment records are kept by Stripe and by us for as long as tax and accounting law requires, even after your account is deleted.
• Backups: encrypted, and expire within 90 days.
• Operational logs: up to 90 days.
• Connected account tokens, including Instagram, Facebook and TikTok: deleted as soon as you disconnect.

If you want it gone sooner than that, say so and we will delete it sooner.

What you can ask for

• A copy of everything we hold about you.
• Deletion of all of it, or of one deal, contact or conversation. By text: “forget everything about Tina” or “clear my chat history”.
• Correction of anything wrong.
• To stop entirely: text STOP, or email us and we close the account.

You can do the first two in your account at textsunny.com/account, under Memory, then Your data. Both ask for a code that Sunny texts to your Sunny thread first. Texting “export my data” or “delete my data” gets you that address. Or email henry@textsunny.com and we will do it. We do not require a form, and we do not charge for it.

Texting STOP does not cancel your subscription. Cancel your plan at textsunny.com/account, or email us. Deleting your account there cancels your subscription first, with nothing more charged.

Deleting your data

You can delete everything Sunny holds about you, or only a connection to one of your accounts, at any time. It is free, and there is no form.

To delete everything

1. Go to textsunny.com/account and sign in with your mobile number, your email or Google.
2. Open Memory, then Your data, and choose Delete my account.
3. Type DELETE, then enter the code Sunny texts to your Sunny thread.

Sunny cancels your subscription first, with nothing more charged. If the subscription cannot be cancelled, nothing is deleted and the page says so. Then your account is deleted with everything in it: your messages, contacts, deals, dates, notes, photos, social post records, and the tokens for every account you connected. Want a copy first? Choose Download my data on the same page. You can also email henry@textsunny.com and we will delete it for you. Billing records are kept as tax law requires, and encrypted backups expire within 90 days.

To delete only your Instagram, Facebook or TikTok connection

Text Sunny “disconnect instagram” (this covers Instagram and Facebook) or “disconnect tiktok”, or press Disconnect on the Connections tab at textsunny.com/account. Sunny asks the platform to remove its access, deletes its copy of the tokens and of your Page and account ids and names, and cancels any post still waiting to go out. Posts already published stay on your account; delete them in Instagram, Facebook or TikTok if you want them gone.

If you remove Sunny in Facebook, Instagram or TikTok

Removing Sunny in your Facebook, Instagram or TikTok settings ends Sunny's access there at once. The tokens Sunny holds stop working, and it can no longer post to that account. To have Sunny delete its copy of them as well, text “disconnect instagram” or “disconnect tiktok”, or email us and we will.

If you live in California

California law gives you the right to know what personal information we collect, use and disclose; to get a copy of it; to have it deleted; to have it corrected; and to opt out of its sale or sharing for advertising. We do not sell or share personal information, as those words are used in that law, and we have not in the past 12 months, so there is nothing to opt out of. We do not use sensitive personal information to infer anything about you. We will not treat you differently for using any of these rights. You, or someone you authorize, can use them by text or by emailing henry@textsunny.com; we will confirm the request comes from you, usually through your Sunny thread, and answer within 45 days.

In the terms that law uses, the information we collect is: identifiers (name, phone, email, IP address); customer and commercial records (plan, subscription and payment status; your card is held by Stripe); professional information (your brokerage, your clients, deals and appointments, as you tell Sunny); and internet activity (sign-ins and server logs). The sources, purposes and recipients are the ones described above. We honour the same requests from anyone, wherever they live.

Not for children

Sunny is a tool for real estate professionals. It is not intended for anyone under 18 and we do not knowingly collect their information. If you believe a child has used Sunny, tell us and we will delete it.

Messaging

Sunny runs over iMessage. We have not tested SMS or Android and do not claim to support them yet. Message and data rates from your carrier may apply. To stop receiving messages, text STOP to the number Sunny texts you from, or email henry@textsunny.com and we will close the account. Text START to come back. Texting STOP does not cancel your subscription; cancel at textsunny.com/account.

Changes

If we change this in a way that matters, we will text you about it before it takes effect, because that is the channel you actually read. The version and date at the top will change too.

Contact

henry@textsunny.com