Trust & security

How we handle your data.

You are handing us your customer conversations. That deserves a straight answer about what we do and do not do with them.

Your data is yours

You own every message, every business fact, every conversation. Export anything, any time, in a machine-readable format. Delete your account and your data is gone.

Least-privilege access

Only the people on our team who need access to a system have access to it. Every production action is logged and reviewable.

No training on your data

Your business data and customer conversations are never used to train third-party AI models. Providers we use are configured to not retain inputs.

Encryption in transit and at rest

TLS 1.2+ everywhere. At-rest encryption on databases, backups, and object storage. Integration tokens (Google, Meta) stored encrypted at the row level.

Region-aware analytics

Product analytics run on PostHog Cloud EU. Marketing analytics are cookie-light — see the cookie policy for details.

DPDP and GDPR ready

Data-rights requests — access, correction, deletion — fulfilled inside 30 days. India DPDP and EU GDPR pathways documented in our DPA.