Skip to main content
Xoxoday Plum does not initiate any customer-facing communications for offers or promotions; all push notifications, emails, SMS, and in-app messages are managed exclusively by your organization through its own channels and approval processes.
When enterprises deploy a rewards and incentives program, maintaining brand consistency and message governance is non-negotiable. Xoxoday Plum is built on the principle that your organization owns every customer touchpoint — the platform never reaches out to your end users on your behalf for promotional or offer-related communications.

​
Your Organization Owns Every Message

All customer-facing communications tied to offers and promotions — including push notifications, email campaigns, SMS alerts, and in-app messages — are delivered solely through your organization’s existing channels and follow your internal approval workflows. Xoxoday Plum provides the rewards infrastructure; your team controls what gets communicated, to whom, and when. This separation is intentional. It ensures that every promotional message carries your brand voice, passes through your legal and compliance review, and reaches customers only after your teams have signed off. There is no scenario in which Xoxoday Plum independently triggers a promotional message to your customers.

​
A Practical Example

Consider an enterprise running a loyalty promotion through Xoxoday Plum integrated with Salesforce Marketing Cloud or a custom CRM. When a reward milestone is reached, Xoxoday Plum logs the event and updates the reward balance in the backend. The communication — whether a push notification through your mobile app or a triggered email in your ESP — is composed, scheduled, and sent entirely by your marketing or CRM team using your own tools. Xoxoday Plum never touches that outbound channel. The same model applies to in-app banners or SMS campaigns. Xoxoday Plum surfaces the data; your organization decides if, how, and when customers hear about it.

​
When Xoxoday Plum May Contact Customers

The only exception is operational support for escalated service requests — for example, a customer experiencing a technical issue with redemption that your support team has escalated and explicitly authorized Xoxoday Plum to assist with directly. Even in these cases, contact requires explicit written authorization from your organization. No unsolicited outreach occurs.

​
Why This Matters for Governance and Compliance

Enterprises operating in regulated industries or across multiple jurisdictions — particularly those with strict data handling requirements under frameworks such as ISO 27001 or SOC 2 Type II — benefit directly from this model. Your organization retains full auditability over all customer communications, which simplifies compliance reporting and reduces third-party data sharing risk. Xoxoday Plum’s role stays within the rewards infrastructure layer, not the customer engagement layer. This architecture also integrates cleanly with tools like Darwinbox or SAP SuccessFactors for employee rewards programs, where HR teams need identical governance over internal program communications without worrying about the platform sending unsolicited messages to employees. Learn more: Xoxoday Plum Help Centre — General

Data Privacy and Compliance Standards

How Xoxoday Plum handles data residency, access controls, and compliance certifications including ISO 27001 and SOC 2 Type II.

Support Escalation and Authorization Process

How escalated service requests are handled and what authorization is required before Xoxoday Plum contacts your customers.