SMS Two-Factor Authentication Privacy Policy

---

Northwest Association of Independent Schools (NWAIS) Accreditation Portal, hosted on Amazon Web Services (AWS), uses SMS messaging as one of the means to deliver two-factor authentication codes to users in the United States.
This section outlines our practices regarding the collection, use, and protection of your personal information in relation to this service.

Information Collection

We collect and store the following information for SMS-based two-factor authentication:

• Your mobile phone number
• Timestamp of when you explicitly consented to receive SMS messages
• Timestamps of SMS messages sent

Use of Collected Information

We use the collected information solely for the purpose of:

• Sending two-factor authentication codes to your mobile device
• Ensuring the security of your account
• Troubleshooting message delivery issues if they arise

Message Content

The SMS messages we send will only contain:

• A one-time authentication code
• Brief instructions on how to use the code

We will never send marketing messages or any other content unrelated to account security through this channel.

Opt-Out Process

You can opt out of receiving SMS messages for two-factor authentication by:

1. Logging into your account settings
2. Navigating to the "User details page", to the "Two-Factor Authentication" section
3. Selecting an alternative method for two-factor authentication

You can also cancel the SMS service at any time by texting "STOP" to 1-800-123-4567.

Data Protection

We take the following measures to protect your information:

• All data is encrypted in transit and at rest using industry-standard encryption protocols
• Access to phone numbers and related data is strictly limited to authorized personnel
• We do not share your phone number or any related data with third parties, except as required by law

Data Retention

We retain your phone number and related SMS messaging data for as long as you have an active account with us. Once you close your account, this information will be deleted within 30 days.

Compliance

Our SMS messaging practices comply with relevant US regulations, including the Telephone Consumer Protection Act (TCPA).

Changes to This Policy

We may update this SMS messaging policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Us

If you have any questions about our SMS messaging practices or this policy, please contact us at:

• Email: info@nwais.org
• Phone: (206) 323-6137
• Address: 5001 California Avenue SW, Ste 112, Seattle, WA 98136

By using our two-factor authentication service, you agree to the terms outlined in this privacy policy.

Last Updated: October 27th, 2024