Compliance & privacy

India DLT rules for SMS. Every business SMS to +91 numbers must use a sender ID and message template registered on the DLT portal (through your SMS provider or telecom operator). Register a one-time-code template such as "{#var#} is your OTP for {store}. Valid for 10 minutes." and enter its DLT template id on the SMS channel page. Without it, Indian networks silently drop the messages.

WhatsApp codes need an approved one-time-code (authentication) template in your WhatsApp Business account.

Costs. Each SMS or WhatsApp code is charged by your provider. Limits in Timing and limits (codes per phone and per network address per hour) and Countries that can receive codes keep bots from running up your bill.

Personal data. Codes are short-lived and can be used once. The emails and phone numbers you verify are personal data under India's DPDP Act: mention in your privacy policy that you send verification codes, and use the numbers only for what you said.

Email codes are free and use your normal store email sending.