Login with SMS Opt-In Workflow

Workflow Overview

Users authenticate using their phone number. During login, users are shown clear SMS opt-in language and must actively consent before receiving any SMS messages from SuperFile.

Step-by-Step Login Flow

1. Login Screen: Phone Number Entry

The user initiates login by entering their phone number.

• The phone number field is accompanied by SMS opt-in disclosure.

• Users may proceed without opting in unless SMS is required for authentication.

2. SMS Opt-In Disclosure

Before any SMS is sent, the user is presented with explicit opt-in language on the login screen.

Disclosure text:

By continuing, you consent to receive SMS messages from SuperFile for login and account-related notifications. Message frequency may vary. Message and data rates may apply. Reply STOP to opt out. See our Privacy Policy and Terms of Service for more information.

3. User Consent Action

The user must take a deliberate action to indicate consent.

• Example: checking an unchecked “I agree to receive SMS messages” checkbox.

• Consent is not implied by phone number entry alone.

4. Submit Login Request

When the user submits the login form:

• The system verifies that SMS consent has been provided.

• If consent is not provided, SMS messages are not sent and an alternative login method must be used.

5. Send Login SMS

After consent is confirmed, SuperFile sends an SMS message (e.g., one-time passcode or login link).

• Messages are limited to authentication and account-related purposes.

• Marketing messages require separate, explicit consent.

6. Verify Code and Complete Login

The user enters the received code to complete authentication.

• Successful verification completes the login process.

• The user’s opt-in status remains associated with their SuperFile account.

7. Opt-In Record Storage

SuperFile records the opt-in event, including:

• Phone number

• User identifier (if applicable)

• Timestamp of consent

• Login flow as the opt-in source

• Version of opt-in language presented

Opt-Out Handling

• All SMS messages support standard opt-out keywords (e.g., STOP).

• If a user opts out, SMS-based login is disabled until the user re-opts in.

Notes

• Opt-in collected during login applies only to login and account-related messages.

• Separate consent is required for marketing or promotional SMS.