Privacy & security

Tenant isolation

Every workspace is a separate tenant. Conversations, knowledge, customers, and outreach are scoped to your tenant — no other workspace can read them, and search and analytics respect the same boundary.

Authentication

• Passwords are stored hashed with bcrypt — never in plaintext.
• Roles gate access: admins manage settings and team; staff can answer the inbox.
• Every staff reply is attributed to the person who sent it.

Widget and API access

Each workspace has a secret API key used to sign widget tokens. Customer-facing endpoints are deliberately separate from staff tools — anonymous customers can chat, but never reach your settings or data.

Honesty by design

The bot is trained to answer only from your knowledge base, admit what it doesn’t know, and escalate instead of guessing. That protects your customers from wrong information and your business from bad promises.