Your data is yours. And it is kept apart from everyone else’s.
Each business is a space. A WhatsApp token cannot sit in the clear in a dumped database. If you want to leave, it is deleted.
In Conext nothing is queried without a customer. Tokens are encrypted. If you leave, the space is deleted: conversations, catalog, agents, and credentials.
Nothing is queried “without a customer”.
Every row carries the business first. CRM queries have no global variant: no business, no row. That is what stops one person’s message from showing up in another’s inbox. There is a check built only for that, and it runs when a query is touched.
People in the dashboard see, by database rules, only the businesses they belong to. Meta’s webhook has no one’s session: it comes in by number and the business is resolved from that, not from a logged-in user.
Secrets are not stored in the clear.
Each customer’s WhatsApp token is encrypted with AES-256-GCM before it hits the database. A dump is not enough to send messages as someone else. API keys are hashed: you can look up the business by the key that arrives, but you cannot rebuild it.
We do not sell data or pass it on. The footer has the privacy policy and how to request deletion. If you leave, that business’s space is deleted: conversations, catalog, agents, credentials.
In practice
- 1
A piece of data comes in
Always tied to a business. The webhook resolves which one from Meta’s number.
- 2
It is stored
Conversations in their space. Tokens encrypted. Keys hashed.
- 3
It can be deleted
The deletion request is published. There is no file of ours with your inbox “just in case”.
Isolation is not a marketing seal. It is the first column of every table and the first argument of every function.
Want to see it with your own threads?
Essential includes one channel, 500 AI conversations per month, and one active agent.