A2P Compliance: What to Include in Your Privacy Policy and Terms of Use

Why your website matters for A2P registration

As of June 30, 2026, major cell carriers require a Privacy Policy URL and a Terms and Conditions URL on every new A2P 10DLC campaign registration, and submissions missing either page are rejected. A2P (Application to Person) registration is required if your firm uses a software application to send automated SMS messages.

What carriers check on your website

Reviewers look for two things: that your policies exist where people can find them, and that they contain specific SMS language. Before actually reading your policies, carriers will check that:

• Both pages are live at public URLs.
• Both are linked in your website footer.
• Links open the actual pages.

What to include in your Privacy Policy

Your Privacy Policy explains how you collect, use, and protect personal information. For A2P, it has to be especially clear about mobile numbers and texting consent. Add a section titled something like "SMS / Text Messaging" that covers the following.

1. The mobile data non-sharing statement

This is the most important line for approval. You must state that you will not sell or share mobile information, including opt-in data and consent, with third parties or affiliates for marketing. Reviewers scan for standard industry wording, so use it as written rather than rephrasing:

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

2. Information you collect and why

List what you gather through your intake forms and chat, and why. Keep it accurate to what your forms actually ask for.

Information We Collect. When you contact [Firm Name] through our website, chat, or intake forms, we may collect your name, phone number, email address, and details you choose to share about your legal matter. We use this information to respond to your inquiry, schedule consultations, and send the text messages you agreed to receive.

3. Who you share data with (and who you don't)

It is fine to share data with vendors who help you serve clients, such as your intake platform, CRM, or phone provider. Name the categories so readers know where their information goes.

We share information only with service providers that help us operate, such as our intake, case management, and communications platforms. These providers may use your information only to perform services for us.

4. Data security

Describe how you protect information, both technically and organizationally.

Data Security. We protect your information with encryption in transit, access limited to staff who need it, and vendors that maintain industry-standard security practices. No system is completely secure, but we take reasonable steps to safeguard your data.

5. Data retention

State how long you keep information and what drives that timeline, such as legal and record-keeping obligations.

6. User rights

Explain what people can ask for, such as access to, correction of, or deletion of their data, and exactly how to make that request.

7. How to opt out of texts

Reviewers expect opt-out instructions in the Privacy Policy too, not just the Terms.

Opt-Out. You can stop receiving text messages at any time by replying STOP. You will receive one confirmation message, and no further texts will be sent.

8. Policy updates and contact information

Note that the policy may change, how you will notify people, and a "Last Updated" date. Close with an email address, phone number, and mailing address for privacy questions.

What to include in your Terms of Use

Your Terms of Use are the agreement between your firm and the people using your site. For A2P, add an "SMS Messaging Terms" section that covers consent and how messages work. Missing any of the core clauses below is a common cause of rejection.

1. Program name and description

Name your firm as the sender and describe the messages people will get. Be specific and match the use case you registered.

[Firm Name] Text Messaging. By opting in, you agree to receive text messages from [Firm Name] about your inquiry, including consultation scheduling, appointment reminders, and requests for information about your case.

2. How consent is given

Describe how people opt in, such as checking a box on your intake form or texting a keyword. Consent must be clear and active; never use a pre-checked box.

3. Opt-out (STOP)

Explain that people can cancel at any time by replying STOP, that they will get one confirmation text, and that no other messages will follow. Keep it unconditional: STOP should stop everything, not just one type of message.

Opt-Out. You can cancel text messages at any time by replying STOP. You will receive one message confirming you have been unsubscribed, and you will not receive further texts from us.

4. Message frequency and rates

Message frequency varies. Message and data rates may apply.

5. Carrier liability

Carriers are not liable for delayed or undelivered messages.

6. Link to your Privacy Policy

For details on how we handle your information, see our Privacy Policy.

Your Terms of Use do more than unlock texting

The SMS clauses above are what carriers check, but they are only one part of a complete Terms of Use. A well-built Terms of Use sets the ground rules for your site and protects your firm in ways that matter long after your campaign is approved.

‍