30896: Campaign vetting rejection - Opt-in Error

This error means your campaign submission was rejected during review because the opt-in details you provided don't adequately show how end users consent to receive messages. Campaign registration requires a clear message_flow, and website-based opt-in flows must include the website URL, privacy policy, terms of service, and any hosted screenshots needed for review.

• Your message_flow does not clearly explain who is opting in, where opt-in happens, or how consent is collected for this campaign.
• You use more than one opt-in method, but you did not list every method in the campaign submission.
• Your website opt-in flow is missing a public website link, a privacy policy link, terms of service, or hosted screenshots for a gated page, paper form, or other flow that a reviewer cannot access directly.
• Your privacy policy does not include the required mobile-number non-sharing statement, message frequency, or a "message and data rates may apply" disclosure.
• You indicate that users can opt in by texting a keyword, but you did not provide opt_in_keywords or a compliant opt_in_message.
• Your opt-in description suggests consent is shared, transferred, or otherwise not collected specifically for this campaign.
• You rely on verbal or offline opt-in, but the submission does not include enough detail for a reviewer to verify the flow.

• Rewrite the message_flow so it clearly explains how end users consent to receive messages. Include who is opting in, where the opt-in happens, and how the campaign collects consent. If you support more than one opt-in path, list every method.
• If opt-in happens on a website, provide the website URL, a link to the privacy policy, and terms of service. If the opt-in flow is behind a login or collected on paper, provide a hosted screenshot or document that shows the exact opt-in language and form.
• If users can subscribe by texting a keyword, provide opt_in_keywords and an opt_in_message. The opt-in response should include the brand name, confirmation of enrollment in a recurring campaign, how to get help, and clear opt-out instructions.
• Update your privacy policy so it states that mobile numbers are not shared with third parties or affiliates for marketing or promotional purposes. Include message frequency and the required message and data rates disclosure.
• Make sure your sample messages match the campaign use case and identify the brand in each sample. If possible, include opt-out language in at least one sample message to make review easier.
• If you use verbal opt-in, describe the exact script or flow in enough detail that a reviewer can verify how consent is captured.
• After you update the campaign details, resubmit the campaign for review.

Run through this list before submitting or resubmitting your campaign:

• message_flow names every opt-in method used for this campaign (website, keyword, paper form, verbal, QR code, or other mechanism).
• message_flow includes a link to your privacy policy and a link to your terms and conditions.
• Your privacy policy states that you don't share mobile numbers with third parties, includes message frequency, and includes a "message and data rates may apply" disclosure.
• If opt-in happens on a website, the URL is publicly accessible. If it isn't public, you have provided a URL with hosted screenshots of the full consent flow.
• If end users opt in by texting a keyword, you populated opt_in_keywords and opt_in_message. The opt_in_message includes the brand name, confirmation of enrollment, message frequency, and opt-out instructions.
• If you use verbal or offline opt-in, the message_flow describes the exact script or process in enough detail for a reviewer to verify how consent is captured.
• If the campaign uses multiple opt-in paths, you describe all paths in the same message_flow field.
• Sample messages match the declared use case, identify the Brand by name, and include opt-out language.

• A2P 10DLC Overview
• A2P 10DLC - Gather the Required Business Information
• Acceptable vs unacceptable privacy policy and T&C URLs
• A2P 10DLC Campaign Approval Requirements