Your customers trust you with their messages. We treat them that way.
Here is what we do today to keep your account and your customers' conversations safe.
- Encrypted connections
- The dashboard, the chat widget and our API are served only over HTTPS.
- Hashed passwords
- Passwords are stored as bcrypt hashes. We can't read them, and neither can our team.
- Team roles
- Admins manage settings, billing and channels. Support teammates can answer chats without touching configuration.
- Separate workspaces
- Each business's agents, knowledge and conversations live in its own workspace, visible only to that workspace's members.
- Signed webhooks
- Every event we send to your systems carries an HMAC-SHA256 signature so you can confirm it came from us.
- Revocable API keys
- Create a key per integration and revoke it from the Developers page the moment it's no longer needed.
- Your data isn't training data
- We don't use your content or your customers' conversations to train AI models.
- Delete any time
- Delete conversations, contacts, sources or a whole agent from the dashboard. Disconnecting Facebook or Instagram removes its access token immediately.
Found a security issue?
Tell us privately and we'll respond quickly. Please give us a chance to fix it before sharing it publicly.
Reach us through the contact page.
Read how we handle personal data in our privacy policy and DPA.
Your next customer might message tonight.
Have an agent answering by then. Add your website and test it in a few minutes.