Cordata Healthcare Innovations, Inc ("we," "us," or "our") uses SMS-based Two-Factor Authentication (2FA) to enhance the security of your account. This policy explains how we collect, use, store, and protect your mobile phone number and related data in connection with our SMS 2FA service.
When you enroll in SMS Two-Factor Authentication, we collect:
We do not collect the content of any messages beyond the verification transaction itself.
Your phone number and associated data are used solely for the following purposes:
We will not use your phone number for marketing, promotional, or advertising communications.
By enrolling in SMS 2FA and providing your mobile phone number, you expressly consent to receive automated SMS messages from us solely for account verification purposes, in compliance with the Telephone Consumer Protection Act (TCPA) and applicable carrier regulations.
We use Amazon Web Services (AWS) End User Messaging and/or Twilio to transmit SMS verification codes on our behalf. AWS and/or Twilio acts as a data processor under our direction and is contractually prohibited from using your phone number for any purpose other than delivering messages on our behalf.
For more information, please review:
We do not sell, rent, or share your phone number with any other third parties.
| Data Type | Retention Period |
|---|---|
| Mobile phone number | Retained while your account is stored within our system. You may contact support to remove your number at any time. |
| Verification attempt logs | Retained indefinitely for security auditing purposes |
| Failed authentication records | Retained for [90 days / 1 year] for fraud prevention |
After the applicable retention period, data is securely deleted or anonymized.
Message and data rates may apply. Message frequency varies based on account activity. Reply STOP to opt out. Reply HELP for support.
SMS Opt-Out: You may reply STOP to any SMS verification message to opt out of SMS-based 2FA. You may reply HELP to receive support contact information. Note that opting out of SMS 2FA may affect your ability to access your account if SMS is your only configured 2FA method.
State-Specific Rights: Depending on your state of residence, you may have additional privacy rights under applicable state law, including the California Consumer Privacy Act (CCPA). To exercise such rights, please contact us at support@cordatahealth.com.
Our SMS 2FA service is not directed at individuals under the age of 13. We do not knowingly collect phone numbers from children under 13. If you believe a child has provided us with their phone number, please contact us immediately at support@cordatahealth.com.
We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of SMS 2FA following notice of changes constitutes acceptance of the updated policy.
If you have questions or concerns about this policy or our SMS data practices, please contact us:
Cordata Healthcare Innovations, Inc.
Attn: Privacy & Security
📧 support@cordatahealth.com