Decode a 10DLC rejection · Critical

Your rejection said something like this

“Privacy policy does not mention SMS or is missing the required data-sharing language”

This means the privacy policy on your site does not specifically address SMS. It has to state that mobile information collected at opt-in is not sold or shared with third parties for marketing, and be reachable from the opt-in.

What this maps to

A rejection worded like that is the known 10DLC reason Privacy policy missing or does not mention SMS. The brand website must host a privacy policy stating that mobile information is not sold or shared with third parties for marketing.

The fix

Publish a privacy policy on the website that explicitly states SMS opt-in data is not shared/sold, and link it from the opt-in flow.

Other ways this rejection is worded

Providers, TCR and the carriers phrase the same reason differently. If yours read more like one of these, it still maps to Privacy policy missing or does not mention SMS:

  • “Website privacy policy does not state that mobile opt-in data is not shared or sold”
  • “No privacy policy found on the website”
  • “Privacy policy does not address text messaging”

Common questions

What does the 10DLC rejection "Privacy policy does not mention SMS or is missing the required data-sharing language" mean?

This means the privacy policy on your site does not specifically address SMS. It has to state that mobile information collected at opt-in is not sold or shared with third parties for marketing, and be reachable from the opt-in. It maps to the known rejection reason "Privacy policy missing or does not mention SMS". The fix: Publish a privacy policy on the website that explicitly states SMS opt-in data is not shared/sold, and link it from the opt-in flow.

What does a 10DLC SMS privacy clause need to say?

That mobile information collected through SMS opt-in is not sold or shared with third parties for marketing purposes, alongside your normal privacy disclosures. It must be published on your live site and linked from the opt-in.