SMS Signup Flow

How users consent to receive SMS messages from Harbor Light.

Overview

Harbor Light is an AI-powered email security companion for older adults. Users opt in to SMS messaging through an explicit, multi-step consent flow on our authenticated user dashboard at graceprotects.com. This page documents that flow for A2P 10DLC campaign review.

Message types: Email security alerts, daily email digests, calendar appointment reminders, and conversational AI responses to user-initiated questions.

Message frequency: Varies based on the user's email volume. Typically 3–10 messages per day.

1 User logs into their dashboard

Users access their account at graceprotects.com/dashboard/:userId after authentication. Dashboard access is gated by OTP verification, so the signup flow below is not publicly reachable — hence this documentation page.

2 User opens the Messaging Channel settings

From the dashboard, the user navigates to Settings. The Messaging Channel section is shown alongside their other notification settings.

graceprotects.com/dashboard/123/settings
Messaging Channel
Phone Number
Not set
Telegram
Connected

3 User clicks "Add Phone" — consent disclosure is shown

Clicking "Add Phone" reveals the phone number input form. Above the input, a consent disclosure containing all required elements is displayed before the user can submit:

graceprotects.com/dashboard/123/settings
By entering your phone number and clicking Send Code, you agree to receive transactional SMS account notifications from Harbor Light about your own email account, including scam/phishing security alerts, daily inbox summaries, and appointment reminders extracted from your emails. Harbor Light does not send marketing or promotional messages. Message frequency varies (typically 3–10 per day). Message and data rates may apply. Reply HELP for help, STOP to cancel. View our Terms and Privacy Policy.
Required A2P 10DLC elements in the consent disclosure:
  • Transactional only "Harbor Light does not send marketing or promotional messages"
  • Service description "scam/phishing security alerts, daily inbox summaries, and appointment reminders extracted from your emails"
  • Brand name "Harbor Light"
  • Frequency "Message frequency varies (typically 3–10 per day)"
  • Fee disclosure "Message and data rates may apply"
  • Help instructions "Reply HELP for help"
  • Opt-out instructions "STOP to cancel"
  • Terms link harborlight.io/terms
  • Privacy Policy link harborlight.io/privacy

Consent is voluntary: Users are not required to add a phone number to use Harbor Light. They can use Telegram instead, or only use the web dashboard. The SMS channel is strictly opt-in.

4 User receives a verification code via SMS

A 6-digit verification code is sent to the entered phone number via Twilio to confirm ownership. The user enters the code to complete enrollment.

graceprotects.com/dashboard/123/settings

5 User receives welcome SMS confirming enrollment

Once the code is verified, Harbor Light sends a welcome SMS restating the program details, frequency, costs, and opt-out instructions. This is the first message the subscriber receives and completes the opt-in confirmation.

Welcome to Harbor Light! You'll receive email security alerts, daily digests, and reminders. Msg frequency varies (typically 3-10/day). Msg & data rates may apply. Reply HELP for help, STOP to cancel.

6 User can opt out at any time

Replying with any of the following keywords to an SMS from Harbor Light immediately opts the user out:

STOP, UNSUBSCRIBE, END, QUIT, HALT, CANCEL, OPTOUT

You have been unsubscribed from Harbor Light. You will not receive any more messages. Reply START to resubscribe.

Users can also disable SMS from the Messaging Channel section of their dashboard at any time.

7 HELP keyword response

Users can reply HELP (or INFO, SUPPORT) to any message for program information:

Harbor Light: AI email security. Msg freq varies (3-10/day). Msg & data rates apply. Reply STOP to cancel. Support: [email protected]

Compliance Summary

This opt-in flow satisfies A2P 10DLC requirements:

  • Consent is voluntary and separate from other account actions
  • No pre-checked boxes — user must explicitly enter a phone number and click Send Code
  • Consent disclosure contains all required elements (brand, service, frequency, fees, HELP, STOP)
  • Phone ownership verified via OTP before enrollment
  • Welcome SMS serves as opt-in confirmation with all required disclosures
  • Privacy Policy discloses that SMS consent data is not shared with third parties
  • Terms of Service include carrier liability disclaimer and full program details
  • STOP, HELP, and START keywords handled automatically with compliance-format responses

Links: Privacy Policy · Terms of Service · harborlight.io