SMS Privacy Policy

Summary

This SMS Privacy Policy explains how HUMMBL collects, uses, and protects your personal information when you opt in to receive text (SMS) messages from us. It supplements our general Privacy Policy, which covers the rest of our website and services. We do not sell your phone number or SMS data. We only text people who have explicitly consented.

1. SMS Program Description

Our SMS program sends occasional text messages to subscribers who have opted in. Message types may include:

• Product updates and release announcements
• Governance research and report notifications
• Event reminders and webinar invitations
• Occasional service-related alerts

We do not use SMS for high-frequency marketing blasts. Our intent is low-volume, high-signal communication.

2. Opt-In and Consent

You will only receive SMS messages from HUMMBL after you have explicitly consented. Consent is collected through one of the following methods:

• Web form opt-in: You enter your mobile number and check a consent box on a HUMMBL sign-up form. The form records your phone number, the consent timestamp, and the IP address of the device used to submit the form.
• Keyword opt-in: You text a designated keyword (e.g., HUMMBL) to our short code or long code. Your inbound message constitutes express consent to receive recurring SMS messages from us.

By opting in, you consent to receive recurring automated SMS messages from HUMMBL at the phone number you provided. Consent is not a condition of any purchase. You may revoke consent at any time (see Section 5, Opt-Out).

We do not send SMS messages to numbers on any state or federal Do Not Call registry unless we have prior express written consent from the subscriber.

3. Data We Collect for SMS

3.1 Data you provide

• Mobile phone number — the number you submit for SMS delivery
• Consent timestamp — the date and time you opted in
• Opt-in source — which form or keyword captured your consent
• Inbound message content — if you reply to our messages (e.g., HELP or STOP), we retain the content of your reply to process your request

3.2 Automatically collected data

• Carrier and line type — looked up from your phone number to validate deliverability
• Delivery status — sent, delivered, failed, or bounced
• Message metadata — timestamps, message ID, and campaign identifier

3.3 Data we do NOT collect via SMS

• We do not collect precise geolocation from SMS
• We do not collect device hardware identifiers via SMS
• We do not profile subscribers based on browsing behavior

4. How We Use SMS Data

• To deliver the SMS messages you opted in to receive
• To process opt-out and help requests
• To monitor delivery health and troubleshoot failed messages
• To maintain consent records for legal compliance (TCPA, CTIA, and applicable state laws)

We do not use SMS data to build advertising profiles. We do not sell or rent your phone number.

5. Opt-Out and Help

You can stop receiving SMS messages from HUMMBL at any time using any of the following methods:

• Reply STOP to any SMS message from us. This immediately opts you out of all HUMMBL SMS campaigns. You will receive a single confirmation message. No further messages will be sent unless you opt back in.
• Reply UNSUBSCRIBE to any SMS message. This has the same effect as STOP.
• Reply HELP at any time to receive a message with support contact information and opt-out instructions.
• Contact us directly via GitHub Issues with the subject “SMS Opt-Out” and the phone number to remove.

Opt-out requests are processed immediately. In rare cases, a message already in transit when you opt out may still be delivered.

6. Message Frequency

Message frequency varies but is typically no more than 4 messages per month. You will not receive more than 1 message per day except in the case of a critical service alert (which is rare and only sent to subscribers who have opted in to service alerts specifically).

7. Message and Data Rates

Standard message and data rates may apply to messages sent from HUMMBL. These rates are determined by your mobile carrier and your messaging plan. HUMMBL does not charge you to receive SMS messages. Check with your carrier if you have questions about your messaging plan.

8. SMS Service Provider

We use Mailchimp (operated by Intuit Inc.) as our SMS messaging platform. When you opt in to HUMMBL SMS, your phone number and consent record are transmitted to and stored by Mailchimp for the purpose of delivering messages on our behalf. Mailchimp is a processor acting on HUMMBL’s instructions.

• Intuit Privacy Statement
• Mailchimp Privacy Policy

Mailchimp may process technical delivery data (carrier lookup, delivery receipts, bounce codes) as part of its platform operations. We do not authorize Mailchimp to use your phone number for its own marketing purposes.

9. Data Sharing

We share SMS data only with the following categories of recipients:

• Mailchimp — our SMS platform provider, as described in Section 8
• Mobile carriers — as required to route and deliver messages
• Legal compliance — if required by law, court order, or regulatory authority

We do not share your phone number or SMS data with advertising networks, data brokers, or third-party analytics providers.

10. Data Retention

We retain SMS consent records and delivery metadata for as long as you are an active subscriber and for up to 24 months after you opt out, to maintain compliance records under the Telephone Consumer Protection Act (TCPA) and CTIA guidelines. Inbound message content (such as HELP or STOP replies) is retained for up to 12 months after processing.

You may request earlier deletion of your SMS data at any time (see Section 11, Your Rights), subject to our legal obligation to retain consent proof.

11. Your Rights

11.1 TCPA and US rights

Under the Telephone Consumer Protection Act (TCPA) and related FCC rules, you have the right to:

• Revoke consent at any time (reply STOP or contact us)
• Receive no further automated SMS messages after revocation
• File a complaint with the FCC if you receive unwanted messages after opting out

11.2 GDPR and EEA rights

For subscribers in the European Economic Area, SMS processing is based on consent (GDPR Art. 6(1)(a)). You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your SMS data
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at GitHub Issues with “SMS Privacy Request” in the issue title.

12. Children’s Privacy

Our SMS program is not directed to anyone under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly send SMS messages to minors. If you believe a minor has subscribed, contact us and we will remove the number immediately.

13. International Subscribers

Our SMS program is primarily intended for subscribers in the United States. If you subscribe from outside the US, your phone number and consent record will still be processed by Mailchimp and may be subject to cross-border data transfers. By opting in, you acknowledge this cross-border processing.

14. Changes to This Policy

We may update this SMS Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes that affect how we use your SMS data will be communicated via SMS where feasible. The source for this page is available on GitHub.

15. Contact

Questions about this SMS Privacy Policy can be directed to GitHub Issues. For SMS-specific requests, reference “SMS Privacy Request” in your issue title.