Number Risk Score data and privacy

Number Risk Score processes phone number metadata to generate a risk score. This page covers what consent you must collect, how long data is retained, and how Infobip handles the data it processes.

Consent

The end user must explicitly give consent before Number Risk Score can process their phone number.

Consent is mandatory for every API call. Your system must collect it from the end user each time before invoking the API. Infobip does not collect consent on your behalf.

Collect consent from the end user using wording similar to this example:

By entering the code, you give your explicit consent for Infobip to analyze your communication patterns with businesses to generate a risk score for your phone number. You can find detailed information in the Privacy notice.

Data retention

Velocity analysis covers only the last 90 days. Other attributes, such as tenure, remain available for as long as the phone number has activity within that 90-day window. All data is derived from Infobip traffic, across all channels.

After 90 days with no interaction, data is no longer available, because the mobile network operator might recycle the number after that period. This applies only if the phone number was not active at all for 90 days.

Data processing

Number Risk Score processes phone number metadata, not message content. The system uses behavioral patterns and historical signals to calculate the risk score.

For more information on how Infobip processes data, see the Privacy notice.