Security
Your customer list, kept safe.
You are trusting us with the people who buy from you. Here is exactly how we protect them — and, further down, what we do not have yet.
How it is built
How we protect it.
-
Your WhatsApp keys are locked away.
The access to your WhatsApp account is encrypted, and is never written into a log file — not even by accident.
-
Signing in is done properly.
The console uses secure cookies over HTTPS, not a token kept in the browser where another script could read it.
-
Each business is walled off.
Run several businesses from one login and nothing can be sent from the wrong one. Every request is checked against who you are.
-
Your team sees what it should.
An inbox agent cannot change your settings or download your data. A button that would be refused is never shown.
-
When we help, we can only look.
Our support access to an account is read-only and expires on its own. We cannot send, edit or delete anything while we are in.
-
A record nobody can rewrite.
Important changes are logged, and the log cannot be edited — by anyone. Anything done during a support session records that it was us.
-
Your customers’ files stay private.
Photos and documents your customers send are never on a public link. Only your team can open them, and us during a support session.
-
Nothing is trusted without a signature.
Notifications from WhatsApp and payments from Razorpay are checked for a valid signature before anything is done with them.
What we do not have
What we do not have yet.
If you need any of these to buy, we are not the right choice yet. Better to know now.
- SOC 2
-
Not yet.
We are small and have not been audited. If you need it to buy, tell us.
- ISO 27001
-
Not yet.
Same answer.
- Where data lives
-
India.
Our servers are in India. Sending a WhatsApp message always passes through Meta’s own worldwide systems.
- Penetration test
-
Not yet.
Better to say so here than let you assume one.
Reporting something
Found something? Tell us first.
Write to hello@talkv.io. We reply within 24 hours and tell you when it is fixed.
We will not take legal action over good-faith research. Please do not touch data that is not yours, do not slow the service down for others, and give us time to fix it before you publish. Want to test something? Ask first — the answer is usually yes.
No paid bounty, but we will thank you by name if you like.
