SMS Terms of Service

Program Name

AllegoryOS OTP Verification

AllegoryOS sends one-time passcode (OTP) SMS messages solely for multi-factor authentication (MFA) purposes. When you select SMS OTP as your MFA method and authenticate with the AllegoryOS platform, we send a time-limited verification code to your registered mobile device to confirm your identity before granting access.

SMS OTP messages are delivered via AWS Simple Notification Service (SNS) from +1-833-377-6794. Supported carriers include all major US and Canadian wireless providers.

AllegoryOS supports two MFA methods: SMS OTP (covered by these SMS Terms) and TOTP via an authenticator application (such as Google Authenticator or Microsoft Authenticator). Both methods are available to all provisioned platform users. Users who prefer not to receive SMS messages may use TOTP as their MFA method and will not receive SMS messages from Allegory.

Access to AllegoryOS is provisioned by Allegory on the written request of your organization. Accounts are not self-service. You opt in to SMS OTP through one of the following two surfaces, both of which require explicit action on your part before any SMS is sent.

2.1 MFA Enrollment During Account Activation

When your account is first activated, you will be prompted to configure your preferred MFA method before completing initial access to the platform. If you select SMS OTP as your MFA method, you will be asked to provide your mobile phone number. Before enrollment is completed and before any SMS message is sent, the following consent notice is displayed:

By confirming your phone number and completing MFA enrollment, you provide express written consent to receive SMS OTP messages from AllegoryOS for authentication purposes.

2.2 Per-Authentication Consent Notice

Each time an SMS OTP code is triggered during an authentication event, a brief consent notice is displayed on screen before the code is sent. The notice reads:

In both cases, consent is explicit, action-initiated by you, and occurs before any SMS message is sent. No SMS message is ever sent without a corresponding action you have initiated on the platform.

Message frequency varies based on your authentication activity on the AllegoryOS platform. You will receive one SMS message per authentication event for which SMS OTP is the selected MFA method. You will only receive a message when you actively initiate an authentication request that triggers SMS OTP delivery.

Each verification code expires within 2 minutes of being sent. If your code expires before use, you may request a new one, which will generate one additional SMS message. Allegory recommends enrolling in TOTP via an authenticator application if you frequently experience SMS delivery delays.

Message and data rates may apply. The cost of receiving SMS messages depends on your mobile carrier plan. Allegory does not charge for SMS messages sent through the AllegoryOS OTP Verification program, but your wireless provider may charge standard messaging and data rates.

If you have questions about your text or data plan, please contact your wireless provider directly.

5.1 Opting Out via STOP

You can opt out of AllegoryOS SMS OTP messages at any time by replying STOP to any SMS message you receive from us. After sending STOP, you will receive one final confirmation message acknowledging your opt-out request. No further SMS messages will be sent to your registered number unless you re-enroll.

5.2 Effect of Opting Out

Opting out of SMS OTP on AllegoryOS does not prevent you from accessing the platform.

Because AllegoryOS supports TOTP as an alternative MFA method, you can continue to authenticate using an authenticator application after opting out of SMS OTP. If you have TOTP already configured, no further action is required — TOTP will remain active as your MFA method.

If you opt out of SMS OTP and have not configured TOTP as an alternative, contact your organization's designated platform administrator or Allegory support at hello@allegoryos.com to arrange an alternative authentication configuration before opting out, to avoid loss of access.

5.3 STOP Confirmation Message

When you reply STOP, you will receive the following confirmation message from AllegoryOS:

No further SMS messages will be sent to your number following this confirmation, unless you re-enroll.

5.4 Re-Enrollment After Opt-Out

To re-enroll in SMS OTP following an opt-out, you may:

• Reply START to a previous message from AllegoryOS and then initiate a new authentication request using the SMS OTP option on the platform
• Update your MFA method to SMS OTP through your platform account settings, which will display the consent notice described in Section 2.1 before re-enrollment is confirmed
• Contact hello@allegoryos.com or your platform administrator to request re-enrollment assistance

If you are experiencing issues with the AllegoryOS SMS OTP program, you can get help through any of the following:

• Reply HELP to any SMS message from AllegoryOS
• Email us at hello@allegoryos.com
• Contact your organization's designated AllegoryOS platform administrator

We will respond to all support inquiries within 2 business days for matters affecting platform access, and within 30 days for all other inquiries.

7.1 Carrier Disclaimer

If you do not receive a verification code:

• Check your device signal strength and network connectivity
• Confirm that your registered phone number in your account settings is accurate
• Request a new verification code — each request generates one new SMS message
• If delivery issues persist, consider switching to TOTP via an authenticator application as your MFA method, or contact hello@allegoryos.com

7.2 Regulatory Compliance

Allegory complies with all applicable US and Canadian telecommunications regulations governing the transmission of SMS messages, including:

TCPA (Telephone Consumer Protection Act)

All SMS messages are sent only after express consent has been obtained and only in direct response to an action initiated by the user

CASL (Canada's Anti-Spam Legislation)

All SMS messages are transactional in nature, sent in direct response to user-initiated authentication requests, and are not commercial electronic messages within the meaning of CASL

AllegoryOS SMS messages are transactional only. No consent to receive marketing or promotional communications is implied or obtained through the SMS OTP enrollment process.

8.1 Use of Phone Number and Consent Data

Your phone number and SMS opt-in consent record are used solely for multi-factor authentication on the AllegoryOS platform. We do not use your phone number for any other purpose.

8.2 No Third-Party Sharing

This expressly excludes SMS opt-in information from all data sharing practices described elsewhere in our Privacy Policy.

8.3 SMS Delivery Infrastructure

SMS messages are transmitted via AWS Simple Notification Service (SNS). AWS processes the delivery of messages as part of Allegory's managed infrastructure. AWS is bound by Allegory's data processing terms and applicable AWS Data Processing Addendum obligations. Your phone number is not retained by AWS beyond what is required for message transmission.

8.4 Full Privacy Policy

For complete information on how Allegory collects, uses, stores, and protects your personal information — including your phone number and authentication data — please review our Privacy Policy at allegoryos.com/privacy-policy, specifically the section on SMS Verification and Consent.

If you have questions or concerns about these SMS Terms of Service, please contact us:

Email

hello@allegoryos.com