Your data, kept safe and kept yours
Customer conversations are some of the most personal data a business holds. Here is exactly how ChatDo protects them, in plain words.
Protected by default
The safe choice is the one already made for you. You can tighten it further, never loosen it by accident.
Separate workspaces
Every business has its own workspace. Each request is checked against the workspace the person belongs to, so one company never sees another's data.
Encrypted keys and secrets
WhatsApp tokens, mailbox passwords, AI keys and other secrets you give us are encrypted with AES-256-GCM and tied to your workspace.
- Never shown in full again after you save them
- Never shown to the AI
Passwords and API keys
Passwords are stored only as one-way hashes. API keys are shown once and then kept only as a hash, so nobody can read them back.
Two-factor sign-in
Every user can add an authenticator app with one-time recovery codes, and sign out any device from their profile.
- Sign in with Google, where offered
- Repeated wrong passwords are slowed down
Card and ID numbers hidden
Payment card, Aadhaar, PAN and US social security numbers are masked before a message is saved, so only the last digits are ever seen.
- On by default
- Also in the live typing preview
Roles and access limits
Owner, admin, agent and lite roles decide who can see and change what. You can limit one person to their own chats or some channels.
- Hide customers' e-mail and phone from a person
- Turn off downloads for a person
A record of changes
An activity log shows who changed which setting and when, in every workspace.
Retention and deletion
Choose how long resolved chats are kept before they are cleaned automatically, and delete any customer with everything about them.
- Numbers for reports are kept
- Customer memory is off until you switch it on
Your data, on request
Every user can download what we hold about them, or delete their account, from their profile. You can export customers as CSV.
Safe for your customers, too
The chat runs on your website and talks to your customers, so it is built to protect them as well.
Only your websites
Your chat only appears on the websites you list. Other sites cannot show it.
Proof of who is signed in
If your site has logins, it can prove who is chatting with a signature made on your server, so nobody can read another customer's chat.
Safe file sharing
Files are checked by their content, stored outside the public website and opened only through signed links that expire.
Spam and abuse filters
Links, spam phrases, repeated messages and bad language are filtered, and repeat offenders are blocked for a while.
- Network blocks store a keyed hash, never the address
An AI that follows your rules
It answers only from your content, treats what customers type as questions rather than instructions, and never sees your keys.
- Asks the customer before it acts
- Topics and words you block are enforced
HTTPS everywhere
Every page and every request to ChatDo uses HTTPS. Webhooks to your servers are signed so you can check they came from us.
Clear policies, in plain words
What we collect, why, and how you stay in charge of it.
Privacy policy
What we collect, why, and who processes it. Read it
Cookies
Only the cookies the site needs, and a choice for the rest. Read it
Grievance officer
A named contact for complaints, with clear time limits. Read it
Acceptable use
What may not be done with the product, to protect everyone. Read it
Security questions
Can other companies on ChatDo see my data?
No. Every business has its own workspace, and every request is checked against the workspace the person belongs to. Data of one workspace is never shown in another.
How are passwords and keys stored?
Passwords are stored only as one-way hashes. Keys you give us, such as WhatsApp tokens, mailbox passwords and AI keys, are encrypted with AES-256-GCM and tied to your workspace. API keys are shown once and then stored only as a hash.
Does the AI see my customers' card numbers?
Payment card, Aadhaar, PAN and US social security numbers are hidden before a message is saved, so your team, the AI, e-mails and webhooks only see the last digits.
Can I delete data?
Yes. You can delete a customer and everything about them, choose how long chats are kept before they are cleaned automatically, and any user can download their data or delete their account from their profile.
Do you train AI models on my conversations?
No, we do not use your conversations to train AI models. They are sent to the AI provider (OpenAI or Google) only to answer your own customers and to run the quality features you switch on, under that provider's own data terms. You can also connect your own AI key.
Who can I tell about a security problem?
Please write to us through the contact page with the details. We read every report and reply as soon as we can.
More about the product
Features
Everything in one place: inbox, AI agent, helpdesk, help centre and more.
AI agent
Answers from your content, hands over when unsure, asks before it acts.
Live chat
A chat window for your website in your colours and 14 languages.
Helpdesk
Tickets with owners, service levels, rules and contact forms.