Convaa SMS terms

Who sends these messages

Convaa is operated by:

Two providers carry the messages, and it matters which is which. Login verification codes are sent by Twilio Verify through Supabase phone authentication. Mention alerts and session invites are sent by our messaging provider, sent.dm. No other system sends text messages on Convaa’s behalf.

The three message types

If you got an invite text you did not expect

Someone typed your number into Convaa to invite you into a shared conversation. We did not get your consent for that, they did, and we say so plainly because a reviewer or a recipient comparing this page against the product would find it out anyway.

What bounds that message, so an invite cannot become a channel for whatever the sender felt like sending:

• The wording is fixed. The personal note a sender can write on an email invite is not passed to the text message at all, so there is no way to put arbitrary content in front of you.
• The two variable parts (the sender’s display name and the session title) are stripped of control characters and of anything that reads as a web or phone destination, and each is length limited on its own.
• There is exactly one link in the message, and it is ours.
• It goes by SMS only, and an account can send at most 25 invites an hour.

To stop them, reply STOP. You can also write to [email protected] and we will suppress your number.

STOP, HELP and support

• STOP. Replying STOP opts your number out at our messaging provider. We stop sending mention alerts and session invites to it.
• HELP. Replying HELP returns contact information for reaching us.
• Support, either way. Write to [email protected]. If a reply does not go through for any reason, this address always works.
• In the product. If you have a Convaa account, turning the SMS mention toggle off in Account settings stops mention alerts immediately, and removing your phone number stops them regardless of the toggle.
• Login codes. A code is only ever sent when somebody asks for one on the sign-in screen, so there is no recurring program to cancel.

Message frequency

Frequency differs by message type and is stated with each one above. It does not collapse into a single number, so we are not going to pretend it does:

• Login verification code: one per sign-in attempt, and only when requested.
• Mention alert: varies with your team’s activity, with no schedule and no minimum.
• Session invite: one per invite, capped at 25 per hour per account.

None of the three is recurring or scheduled. Convaa runs no SMS campaign of any kind.

Message and data rates

Message and data rates may apply. Convaa does not charge you for these messages; your mobile carrier may charge for receiving them under your plan. Carriers are not liable for delayed or undelivered messages.

What Convaa does not do

• No marketing SMS. All three message types above are transactional. Convaa runs no SMS campaigns, no promotional sends, and no recurring marketing program. There is no marketing SMS to opt in or out of, because none exists.
• No selling or sharing of numbers. We do not sell phone numbers or SMS consent data, and no mobile information is shared with third parties or affiliates for marketing or promotional purposes.
• No consent bundled into a purchase. Agreeing to receive text messages is not a condition of buying anything from us or of using Convaa.

Phone numbers and consent data

What we hold, per message type:

• Login code: the number you entered, stored as the verified auth phone on your account.
• Mention alert: that same verified number, plus the on or off state of your SMS mention preference. The preference is a single boolean on your profile and it starts off.
• Session invite: the number the inviter typed, stored on the pending invite record for that session.

These are used solely to deliver the messages described on this page. Numbers reach our messaging provider (sent.dm for mention alerts and invites, Twilio through Supabase for login codes) for the single purpose of delivering the message, and reach nobody else.

Retention

• Your own number stays on your account until you change or remove it. Removing it in Account settings removes it from us.
• An invited number lives on the pending invite record. That invite stops working 14 days after it is created, and anyone with access to the session can revoke it, which deletes the record and the number with it.
• Opt-out records are kept for as long as we need them to keep honouring the opt-out. Deleting the record of your STOP is what would let a later message through, so we do not delete it.
• Message content is not retained to build a profile of you and is not used for advertising.

Security of this data

Numbers are held in our access-controlled production database and travel to the messaging provider over encrypted connections. The provider credentials live server side and are never exposed to a browser. One thing worth stating plainly rather than leaving for you to discover: a pending invite’s phone number is visible to the members of that session in the pending invite list, in exactly the way an invited email address is, so that somebody can tell two pending invites apart and revoke the right one.

More detail on encryption, access control and data handling is on the security page.

Cancellation, and what happens afterwards

• After you opt out, we send no further mention alerts or session invites to that number.
• Opting out of SMS does not close your Convaa account and does not stop email notifications.
• To start mention alerts again, turn the SMS mention toggle back on in Account settings. If your number is still suppressed at the messaging provider, write to [email protected] and we will clear it.

Changes to these terms

If a message type changes, or a new one is added, this page is updated before the change reaches anyone’s handset, and the date at the top changes with it.

Contact

For how Convaa handles data generally, see the privacy policy.