SMS Data Retention
Data retention policies for Short Message Service (SMS) texts for Twilio and Genius are described below.
Twilio
The Twilio SMS text retention policy:
Message logs are retained for up to 13 months (default, configurable between 7–400 days).
Media attachments are deleted after 13 months. If long-term access to SMS data beyond Twilio’s retention is needed, export and store records on your system using bulk export or continuous log archiving.
For additional information, see Twilio's documentation.
Genius
Under the Genius data retention policy, phone numbers captured within the order object are managed as Personally Identifiable Information (PII) data collected in the order, same as email addresses, customer names, and customer addresses. The data is encrypted both at rest and during transit between services.
Local orders are retained on in-store devices, such as tablets and point of sale (POS) terminals, for one business day post-finalization. After one business day, the order data is purged.
The order data is transmitted to the Genius cloud and stored within an encrypted database for an extended period until archiving, and is excluded from external interfaces , such as Data Stream. The order data is removed when provided to external consumers, unless an explicit whitelist exception is implemented for a specific Data Stream endpoint. PII data is masked within all log entries.
For SMS receipts, an HTML version of the receipt is stored and accessible through a URL included in the SMS message. This receipt does not contain any PII data. The receipt remains accessible through the provided link for one year.