Operator and scope
9000INC is the website brand operated by an individual sole proprietor. This policy covers optional phone-number verification and separately selected account/security and purchase notifications. Marketing texts are not offered by this release.
Information processed
When you request a code, we process your phone number, account ID, browser-session association, selected categories, verification status, consent wording and time, policy version, and limited delivery/abuse-prevention records. Phone numbers are encrypted in our SMS records. Keyed hashes support duplicate detection, rate limiting and opt-out enforcement. IP-based abuse identifiers are keyed hashes, not raw IP addresses in the SMS records.
One-time codes expire after five minutes, are limited to five entry attempts and are not stored in plaintext. Our SMS delivery ledger stores state, category and the last four phone digits, not message bodies or codes. Twilio and carriers necessarily process the destination and message content to deliver a text.
Sharing and providers
We do not sell or rent mobile numbers or use them for unrelated marketing. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with third parties for their own use. Necessary service providers, including Twilio and telecommunications carriers, process information only to operate messaging and meet applicable requirements.
Consent and control
Requesting a verification code does not itself subscribe you to recurring alerts. Account/security and purchase texts have separate unchecked opt-ins. You may disable subscriptions or remove your number in Phone & SMS, or reply STOP. START removes a transport block but does not automatically restore either recurring subscription. Consent is not required to use the website or purchase products.
Retention and protection
Verification secrets are cleared on successful use, cancellation, lockout or expiry cleanup. Challenge records are retained for up to seven days; delivery and webhook deduplication records for up to 90 days; consent evidence for up to two years. Scheduled cleanup enforces these periods, subject to operational delays. Opt-out hashes are retained to honor suppression. Linked phone records remain until removal, account deletion or account-merge cleanup. Providers and backup systems may retain their own records under their policies.
Access is restricted, and stored credentials and full phone numbers are encrypted using the site's private delivery key. SMS is not an end-to-end encrypted channel. We send generic account/purchase summaries rather than private notice contents.
Contact
For assistance or privacy requests, contact 9000INC Support or 9000inccom@gmail.com.