Campfire SMS
This Privacy Policy explains how Campfire SMS (“we,” “us,” or “our”) collects, uses, and shares information when you use our website and connected-agent SMS messaging service (the “Service”).
Information the Service processes
When you activate or use Campfire SMS, telecommunications providers deliver your originating phone number, message body, message identifier, and related delivery data to Campfire SMS. The Service may process the messages and related metadata needed to associate an SMS conversation with your connected-agent environment, route your instructions, deliver agent updates, prevent abuse, and provide support. If you email us, we receive your email address and the contents of your request.
How we use information
We use information to operate the messaging service, authenticate and route messages, deliver conversational replies and task notifications, suppress duplicate processing, troubleshoot failures, prevent abuse, comply with law, and respond to support requests. Your connected agent remains responsible for the tools, files, network access, and inference services in its own environment.
SMS and mobile information
Campfire SMS does not sell or share mobile phone numbers, SMS opt-in data, or text-messaging consent with third parties or affiliates for their marketing or promotional purposes. SMS-related information may be disclosed to service providers and subprocessors solely as necessary to operate and support the Campfire SMS messaging service, such as telecommunications providers, hosting providers, and infrastructure vendors, or where disclosure is required by law. Text-messaging opt-in data and consent will not be shared with any third parties.
How we share information
We may share information with telecommunications providers to receive and send SMS, and with hosting, infrastructure, security, and support providers that process information on our behalf to operate the Service. We may also disclose information when required by law or to protect rights or safety. If the Service is sold, merged, or otherwise transferred, account information may move to the new operator under this policy, but mobile phone numbers, SMS opt-in data, and SMS consent will not be transferred or shared with a buyer or any other third party.
SMS consent, frequency, and charges
Users separately opt in through our public SMS opt-in disclosure. SMS message frequency varies based on user activity, connected-agent activity, and configured notification behavior, and is limited by each account’s plan and purchased message credits. Most users receive fewer than 100 messages per month. Message and data rates may apply. Reply HELP for help or STOP to opt out.
SMS transmission and telecommunications providers
SMS is not end-to-end encrypted. Twilio and participating carriers necessarily receive and process phone numbers, message content, and delivery data to transmit messages. Twilio receives the inbound message body delivered from your phone. For agent-originated outbound messages, Campfire SMS normalizes and, when needed, truncates text before sending it to Twilio; Twilio receives the final body Campfire SMS submits, not text Campfire SMS discarded before submission. Under our current provider configuration, Twilio message records may include message content and be available through Twilio’s Console or APIs. Twilio and carriers may retain information under their own settings, policies, and legal obligations.
Data retention and logs
We keep information only as long as needed for the purposes below:
- Incoming SMS messages waiting for your agent are deleted automatically seven days after we receive them.
- Duplicate-delivery records (provider message IDs used to avoid processing a message twice) are deleted after seven days.
- Message usage counters are kept for about two months.
- Account information, such as your verified phone number, a salted hash of your PIN, installation records, and message balance, is kept while your account is open. If you ask us to delete your account, we delete it within 30 days.
- Opt-in and opt-out records (your phone number and its START or STOP status) are kept for as long as we operate the SMS program, including after account deletion, so that an opt-out is always honored.
- Payment records are held by our payment processor, Stripe, and kept as long as tax and accounting law requires.
- Application logs are configured not to record SMS message bodies. They are size-capped and rotated automatically, so they are not kept long-term.
These periods do not cover copies held by Twilio, carriers, connected-agent environments, or sender and recipient devices, which keep information under their own settings and policies. Do not send passwords, payment-card details, government identification numbers, protected health information, or other highly sensitive information by SMS.
Your choices
You may stop SMS messages at any time by replying STOP. Reply HELP for help. You may request access to, correction of, or deletion of your personal information by emailing us. We may need to verify your identity, and some requests may be limited by law.
Security
SMS is not end-to-end encrypted and may be visible to carriers, device users, and anyone with access to your phone. We use reasonable administrative, technical, and organizational safeguards designed to protect information, but no method of transmission or storage is completely secure.
Children’s privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us.
Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the effective date above. Material changes will be communicated as required by law.
Contact us
Questions or privacy requests may be sent to support@campfiresms.com.