Privacy policy clauses for Twilio
Twilio is a cloud communications platform that enables websites and applications to send and receive SMS messages, make voice calls, conduct video sessions, and deliver messaging services. Websites use Twilio to authenticate users, send notifications, enable customer support, and facilitate real-time communications.
Free scan · No signup · Results in 60 seconds
What data Twilio collects
Your privacy policy must disclose each of the following data types when you use Twilio.
When does Twilio trigger privacy obligations?
Installation triggers immediate data collection
The moment you integrate Twilio into your app or website, you begin collecting and transmitting phone numbers, SMS content, voice metadata, and potentially call recordings to Twilio's US servers. This is not conditional—Twilio processes this data the instant a user initiates communication.
Which regulations apply
GDPR (if any EU users): Phone numbers and call metadata are personal data under GDPR Article 4(1). You must establish a lawful basis (Article 6) *before* collecting—typically consent under Article 7 or legitimate interest. SMS content may qualify as special category data if it contains health or other sensitive information (Article 9). You must provide a privacy notice under Article 13/14 *at the point of collection*.
