Security
Each agency's data, kept its own.
How it is hosted, who can reach what, and what is recorded.
Own install per agency
Its own database, never shared with another agency.
Hosting
DigitalOcean, London, managed with Laravel Forge. Saudi hosting on request.
Encryption in transit
HTTPS with TLS 1.2 or 1.3, secure session cookies.
Encryption at rest
Platform tokens and two-factor secrets encrypted with AES-256.
Sign-in
Bcrypt-hashed passwords, two-factor and passkeys, no public sign-up.
Roles and limits
Each person sees and approves only what their role allows.
Audit trail
Every action, with who, what and when. Never edited.
Actions on instruction
Campaign changes only when a signed-in user makes them.
Client links
Signed, expiring, and limited to one plan.
Email, mailbox only
Gmail or Outlook: your own mailbox, approved by your admin.
Retention and deletion
Kept while connected; deleted within 30 days of a request.
No sale, no AI training
Platform data is used only to run the product.
Report a security issue
Email us with "Security" in the subject. We reply within two working days.
No third-party certification (such as SOC 2 or ISO 27001) is claimed. See also the privacy policy.