Security & Trust

Built on Meta's official API,
secured end to end

Every account and conversation is isolated, verified, and never resold. Here's exactly how.

Two-factor authentication

Optional Google Authenticator (TOTP) login with single-use backup codes, on top of a salted, hashed password.

Official Embedded Signup

You connect your WhatsApp Business Account through Meta's own signup popup — we never ask for or handle your Facebook password.

Per-account data isolation

Every dashboard query is scoped to the signed-in account — one customer's conversations, contacts, and access tokens are never reachable by another.

Private media storage

Photos, videos, and documents sent or received over WhatsApp are stored outside any public web path, served only to the account that owns them.

Verified webhooks

Every inbound webhook from Meta is signature-verified (HMAC SHA-256) before we process it, so spoofed events are rejected.

No data resale

We don't sell, share, or monetize your messaging data with third parties. See our Privacy Policy for full detail.

Have a security question?

If you've found a security issue or have a compliance question, we want to hear from you directly.

Contact Us