Data Protection

We use industry-standard encryption to protect your data:

• In Transit: All data transmitted between your device and our servers uses TLS 1.3 encryption
• At Rest: Your stored data is encrypted using AES-256 encryption
• WhatsApp Messages: End-to-end encrypted by WhatsApp's protocol

Our infrastructure is designed with security as a priority:

• Hosted on secure, SOC 2 compliant cloud infrastructure
• Regular security audits and penetration testing
• Automated threat detection and monitoring
• Redundant backups with geographic distribution
• DDoS protection and Web Application Firewall (WAF)

We adhere to international data protection standards:

4. Access Controls

We strictly limit who can access your data:

• Only authorized personnel can access user data
• All access is logged and audited
• Multi-factor authentication required for all staff
• Regular access reviews and privilege audits

You have control over your data:

• Active Accounts: Data is retained as long as your account is active
• Account Deletion: When you delete your account, all personal data is permanently removed within 30 days
• Export: You can export all your data at any time from Settings
• Inactive Accounts: Accounts inactive for 2+ years may be deleted after notification

6. Incident Response

In the unlikely event of a security incident:

• We have a dedicated incident response team
• Users will be notified within 72 hours of any breach affecting their data
• We work with security experts to investigate and remediate
• Post-incident reviews ensure continuous improvement

7. Questions or Concerns?

If you have any questions about how we protect your data, please contact us: