Security & privacy

Your chats

• Encrypted at rest. Message bodies are encrypted with a key the dashboard never holds — chats are decrypted only for your business, only when you open them. Platform administrators and raw database access see ciphertext.
• Media too. Inbox media links are short-lived signed URLs; voice notes on social channels are processed and never stored.
• Screens are attributable. The Inbox watermarks every view with the signed-in teammate — screenshots carry their name.

Your business's walls

• Hard isolation. Every record carries your business's id and every query is scoped to it — customers, orders, chats and settings from one business are invisible to another, even on the same account.
• Connections are least-privilege. Shopify access asks only for the scopes the agent uses; WhatsApp/Instagram credentials are stored encrypted; disconnecting deletes the tokens.
• Payments never touch us. Checkout is processed by Paddle, our merchant of record — card details never reach our servers.

Your account

• Two-factor authentication — Dashboard → Account → enable TOTP (any authenticator app). Sign-ins then require the 6-digit code.
• Roles and permissions — teammates see only what you grant, enforced server-side. See Team & roles.

The AI's own rules

• Safety rules are always on — a pre-send check strips invented discounts, prices that didn't come from your store's data, and your staff number from every reply. It cannot be switched off.
• It says it's an AI — every conversation opens with the agent introducing itself as the shop's AI assistant, and it answers "am I talking to a bot?" truthfully.
• Risk without profiling — COD risk uses only that phone number's own order history in your store. Nothing demographic, ever.

Deleting things

• One business — Business page → danger zone: deletes its conversations, customers, orders, files and billing; your sign-in and other businesses stay.
• The whole account — Account page: cancels subscriptions, releases WhatsApp numbers, deletes every business you created. Only the email (with its used-trial marker) is retained, per the data-deletion policy.
• Customer requests — data export and forget-me for an individual customer are handled from the Customers page; Shopify's privacy webhooks (data request / redact) are implemented for connected stores.