SecuritySeparation between businesses
Each business has its own record, settings, contacts and conversations. Requests to the public endpoints are tied to one business by its Client ID.
Verified webhooks
Incoming webhooks from Shopify and Meta are checked with a signature before they are processed. Requests with a bad signature are rejected.
Signed-in access
Dashboard access requires a signed-in user. Team members see only the features their permissions allow.
Platform
Messaging runs on WhatsApp's official Business Platform, operated by Meta.
Data
We keep what is needed to run your conversations, reports and integrations. Ask us to export or delete your business data at any time.
Report a security issue
If you think you have found a security problem, contact us and describe what you found. We will look into it.