Version History

• May 22, 2026 v1 medium
  Twilio added two new disclosures to its Privacy Notice on May 22, 2026. First, the policy now explicitly states that Twilio Inc. is subject to FTC investigatory and enforcement powers. Second, the policy introduces an opt-out mechanism allowing users to decline third-party data disclosure (except service providers) or use of their data for purposes materially different from the original collection purpose. The policy also corrected terminology from 'Data Protection Frameworks' to 'Data Privacy Frameworks' in the dispute resolution section.
  +2 added · 1 modified
  7554b23ee088…
• May 19, 2026 v1 medium
  Twilio updated its privacy notice on May 19, 2026 to provide more explicit detail about its Data Privacy Framework (DPF) compliance and certification. The revised language states that Twilio Inc. and subsidiary Stytch Inc. certify compliance with the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF as set by the U.S. Department of Commerce. The update also clarifies that if DPF Principles conflict with other terms in the privacy notice, the DPF Principles govern. Additionally, the notice now explicitly describes opt-out choices for third-party disclosures and uses that differ from original collection purposes, and identifies JAMS as the specific dispute resolution provider for DPF-related complaints.
  +12 added · 3 modified
  a4a3739040fc…
• May 1, 2026 v1 low
  Twilio's privacy notice now includes a specific statement that it does not sell personal data to third parties for marketing or promotional purposes. The prior language stated the company does not sell data generally. The updated version narrows this commitment by specifying that while certain categories of personal data may be shared for business purposes, mobile information specifically will not be shared or sold for marketing or promotional purposes. This creates a more detailed disclosure of what data may or may not be used for marketing.
  · 2 modified
  8aa34d875dec…
• May 1, 2026 v1 low
  Twilio's Privacy Notice table of contents was updated on May 1, 2026 to add a reference to 'Twilio Messaging Campaign Terms' in the list of linked legal documents. The prior version did not explicitly list this document. This appears to be a navigation or organizational update to the privacy documentation hub rather than a change to substantive privacy rights or obligations.
  · 1 modified
  e2e78bf61918…
• April 19, 2026 v1 low
  Twilio substantially restructured its Privacy Notice on April 19, 2026, replacing detailed operational descriptions with a principles-based framework centered on Binding Corporate Rules. The prior version explicitly described the types of relationships (direct and indirect) under which Twilio processes personal data and defined what constitutes personal data; the updated version frontloads Twilio's BCR governance model and emphasizes transparency values. The operational difference is primarily presentational and structural: the core data processing authority and scope remain intact, but the notice now leads with governance commitment rather than specific collection practices.
  765c851ebceb…
• April 10, 2026 v1 low
  Twilio substantially reorganized and rewrote its Privacy Notice as of April 9, 2026, replacing 120 sentences with new language. The updated notice removes the prior sectional explanation of direct and indirect relationships with users and simplifies the introduction to emphasize Twilio's commitment to Binding Corporate Rules and transparency. The revised language consolidates the scope statement into a single operational description of personal data collection and processing without materially altering the stated scope of the policy itself.
  +61 added · -120 removed · 141 modified
  3effcfffa326…
• March 28, 2026 v1 low
  Twilio corrected a typo in their privacy notice URL on March 28, 2026. The previous version stated the URL as 'https://www/twilio.com/legal/privacy' (missing the dot between 'www' and 'twilio'), while the updated version corrects this to 'https://www.twilio.com/legal/privacy'. This is a technical correction that does not change the substance of the privacy notice policy or procedures.
  · 1 modified
  82f879e1032b…
• March 19, 2026 v1 medium
  Initial snapshot — monitoring begins
  53629b8f4a10…