How users opt in
Phone numbers are collected at one of two points in the authentication flow, both of which require an explicit user action:
-
Sign-in by text at
https://app.harvestengine.ai/auth/sms/start. The user enters their phone number and email, taps Send me a code, receives a 6-digit code via SMS, and enters the code to complete sign-in. The opt-in disclosure (quoted below) appears directly under the form before the user submits. -
Phone enrollment after sign-in at
https://app.harvestengine.ai/onboarding/phone. Users who created their account with Google, Microsoft, Apple, or email + password are asked to verify a phone number for sign-in security. The same disclosure language appears on this page before submission.
Submitting either form is the affirmative action that grants consent. Users may decline and use a non-SMS sign-in method (Google, Microsoft, Apple, or email + password) instead.
Screenshots of the live opt-in pages
The two pages where the consent language appears, captured from the production sign-in flow:
/auth/sms/start (passwordless sign-in by text).
Consent language directly under Send me a code.
/onboarding/phone (post-SSO phone enrollment).
Same consent language; phone-only because email is already on file.
Exact consent language shown to users
The following disclosure is rendered immediately under the phone-number entry field on both opt-in pages:
By continuing you agree to receive transactional SMS from HarvestEngine for sign-in codes, security alerts, trade-approval links, and harvest summaries. Msg & data rates may apply. Message frequency varies. Reply STOP to opt out, HELP for help. See our Terms and Privacy Policy.
What we send
All HarvestEngine SMS traffic falls into one of four transactional categories:
- Sign-in codes — one-time 6-digit codes for passwordless login.
- Two-factor verification codes — one-time 6-digit codes confirming identity after SSO sign-in for users who enabled SMS MFA.
- Trade-approval links — signed URLs that open a review page for a tax-loss-harvest proposal the user can approve, modify, or reject.
- Account-security alerts — notifications about new-device sign-ins, broker token expirations, kill-switch activations, and post-execution summaries of trades just placed.
We do not send marketing SMS, promotional offers, cross-sell, advertising, surveys, or third-party content. Phone numbers are never sold, rented, traded, or shared with any party for any marketing purpose, ever.
Sample messages
- HarvestEngine: Your sign-in code is 482917. Don't share this code with anyone. Reply STOP to unsubscribe, HELP for help.
- HarvestEngine: New harvest proposal ready for review — est. $1,240 in losses captured. Approve: https://app.harvestengine.ai/review/abc123?sig=...
- HarvestEngine: Your E*TRADE token expires in 24 hours. Re-authenticate to keep harvesting active: https://app.harvestengine.ai/account
Message frequency
Approximately 5 messages per month per active user, driven by the user's own activity (sign-ins, trade approvals, portfolio events). Inactive users receive zero messages. There is no recurring scheduled broadcast.
How users opt out
Reply STOP to any HarvestEngine message at any time. The carrier-mandated confirmation reply is sent automatically and the phone number is immediately marked opted-out in our database. We will not send further SMS to that number unless the user re-opts-in by replying START.
Other recognized keywords:
- STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT — opt out.
- HELP, INFO — receive a help reply with our support contact.
- START, YES, UNSTOP — re-subscribe after opting out.
Help & support
Reply HELP to any HarvestEngine message and you will receive:
HarvestEngine support: visit https://app.harvestengine.ai/privacy or email support@harvestengine.ai. Reply STOP to opt out. Msg & data rates may apply.
You can also email support@harvestengine.ai directly, or reach our privacy team at privacy@harvestengine.ai.
Carrier & cost disclosures
- Message and data rates may apply, charged by your carrier.
- HarvestEngine itself does not charge for SMS.
- Carrier and handset support is not guaranteed; deliverability is best-effort.
- Service available in the United States and Canada.
Data handling
Phone numbers are stored in HarvestEngine's Postgres database with row-level security scoped to the owning user account. They are used solely for the transactional messages described above and are subject to the same retention and deletion rules as the rest of your account data — see our Privacy Policy for the full operational summary.
This page is the operational summary of HarvestEngine's SMS messaging program for purposes of carrier and CTIA compliance review. The formal Terms of Service govern in case of conflict. Last updated: 2026-05-05.