SMS Two-Factor Authentication Privacy Policy

Last Updated: August 31, 20226

SPOKE Design, LLC offers optional SMS two-factor authentication to authorized administrators of WordPress websites managed by SPOKE.

Information We Collect

When you enroll in SMS two-factor authentication, we collect and maintain:

• Your mobile telephone number
• Your SMS two-factor authentication enrollment status
• The date and time consent was provided
• The version of the consent disclosure accepted
• The date and time consent was withdrawn, if applicable
• SMS delivery information needed to operate and troubleshoot the service

How We Use This Information

We use this information exclusively to:

• Send one-time WordPress login security codes
• Verify and document your enrollment in SMS two-factor authentication
• Maintain the security of the websites and accounts we manage
• Troubleshoot failed or delayed message delivery
• Comply with applicable legal, carrier and telecommunications requirements

We do not use SMS enrollment information for advertising, promotional messaging or marketing.

SMS Service Providers and Information Sharing

SPOKE uses Twilio and related telecommunications providers to transmit SMS security codes. These providers process mobile numbers, message content and delivery information only as necessary to transmit and maintain the requested messaging service.

SPOKE does not sell, rent or transfer mobile numbers, SMS opt-in information or SMS consent.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

SMS consent applies only to this specific two-factor authentication program. Consent is not transferable to another organization, program or messaging purpose.

Message Frequency and Charges

Messages are sent in response to WordPress login activity. Message frequency varies according to the number of login security-code requests associated with your account.

Message and data rates may apply according to your mobile service plan. Mobile carriers are not liable for delayed or undelivered messages.

Data Retention

We retain your mobile number and current consent status while SMS two-factor authentication remains enabled for your account. Consent and revocation records may be retained after enrollment ends when necessary to document compliance, investigate security events or resolve messaging disputes.

Information is deleted or anonymized when it is no longer reasonably necessary for these purposes, unless a longer retention period is required by law.

Your Choices

SMS two-factor authentication is optional. You may withdraw consent at any time by:

• Unchecking Enable SMS two-factor authentication in your WordPress profile and saving the change
• Contacting SPOKE Design, LLC at info@spokehq.com

Replying STOP will prevent additional SMS messages from being delivered from SPOKE’s shared security-code number. Reply START to resume receiving messages.

Withdrawing consent stops future SMS security codes. You may need to arrange another authentication method before accessing a protected website.

For assistance contact SPOKE Design, LLC at info@spokehq.com.

Message frequency varies according to login activity. Message and data rates may apply. Mobile carriers are not liable for delayed or undelivered messages.

Security

SPOKE uses reasonable administrative and technical safeguards to protect mobile numbers, consent records and messaging information. No method of electronic storage or transmission is completely secure.

Contact Us

Questions about this SMS program or your information may be directed to:
SPOKE Design, LLC
571 Hunters Run
Perrysburg, OH 43551