Encryption of your data.
SmartChat encrypts every connection, stores your WhatsApp number's access data encrypted and your API keys only as a hash.
Every connection encrypted.
Whether you're working in SmartChat or a contact opens your landing page: the connection always runs over HTTPS.
- HTTPSfor the SmartChat app and for every landing page.
- Automaticyour own domain gets a security certificate as soon as it's connected. More about Custom Domain
- HSTSmakes sure your browser only opens SmartChat encrypted.
Access data for your WhatsApp number encrypted.
When you connect your WhatsApp number, SmartChat stores the access to Meta encrypted. It's only decrypted when SmartChat needs it, for example to send.
AES-256-GCM
SmartChat encrypts the access with AES-256-GCM, a standard for strong encryption.
Key kept separate
The key is only stored in the server environment, never in the program code.
Never in plain text
If access data can't be encrypted securely, SmartChat doesn't save it at all.
API keys never in plain text.
If you connect other programs via the API, SmartChat stores your API key only as a hash. In SmartChat, saved keys are only shown in shortened form.
HMAC-SHA256
Only a hash of the key is stored, calculated with HMAC-SHA256.
Irreversible
Your key can't be worked out from the stored hash.
Securely compared
With every request, SmartChat only compares hashes, never the key itself.
Unsubscribes stay protected.
The block list for unsubscribed numbers doesn't contain any phone numbers in plain text.
- ProtectedThe block list stores no unsubscribed phone number in plain text, and it is kept separate for each account.
- STOPremains effective anyway: an unsubscribed number gets no message, even after deleting it and importing again.
Frequently asked questions about Encryption.
Does my landing page run over HTTPS?
Yes. Every landing page runs over HTTPS, just like the SmartChat app.
Does my own domain get a security certificate?
Yes. As soon as your domain is connected, it automatically gets a security certificate. You don't have to take care of it. Learn more under Custom Domain.
How does SmartChat store the access data for my WhatsApp number?
Encrypted with AES-256-GCM. The key is only stored in the server environment, never in the program code.
What happens if access data can't be encrypted?
Then SmartChat doesn't save it. You see a notice and reconnect your WhatsApp number once.
How does SmartChat store my API keys?
Only as a hash, calculated with HMAC-SHA256. The key itself is never stored in plain text.
What is a hash?
A hash is like a fingerprint made of characters. SmartChat uses it to check whether a value is correct without storing the value itself.
How does SmartChat store unsubscribed numbers?
In a block list for each account, not in plain text. The block applies to the account the contact unsubscribed from with STOP.
What stays stored when I delete a contact?
SmartChat deletes the contact. If the contact unsubscribed, the block entry stays so they don't get any messages after a new import.
Can another account see my contacts?
No. SmartChat stores each account's data separately. Every account only sees its own contacts, conversations and records.
Is my data backed up too?
Yes, encrypted. Learn more under Data backup.
Where can I find the service providers SmartChat works with?
In the privacy policy and in the data processing agreement.
Start your WhatsApp marketing in 60 seconds.
Enter your website. SmartChat AI analyzes your business and builds your system, for free.