Your customers trust you with their messages. Here is how UNFYCHAT handles them.
Separate workspaces
Every company works in its own workspace. Each request is checked against the workspace it belongs to, so one company never sees another's data.
Permissions on the server
Roles are enforced by the server, not just hidden in the interface. A manager can't open a conversation they are not allowed to see.
Encrypted platform tokens
Access tokens from Instagram, Facebook and WhatsApp are encrypted at rest and never sent to the browser.
Encrypted connections
All traffic uses HTTPS. Browsers are told to use HTTPS only (HSTS).
Official APIs only
We connect to messaging platforms only through their official APIs and sign-in. We never ask for your social media passwords.
Audit log
Sensitive actions — role changes, channel connections, settings — are recorded with who did what and when.
Data retention you control
Workspace owners can set how long message texts and attachments are kept. Older content is removed automatically.
Protected sign-in
Passwords are stored only as strong hashes. Sign-in attempts are rate-limited, and Google sign-in is available where it is configured.
Hosting in the EU
The application servers and the database run in Frankfurt, Germany.
No conversations for advertising
Message contents are never sent to advertising or analytics systems.
Report a security issue
If you think you found a vulnerability, write to support@unfychat.com. Please don't access other people's data while testing.
Bring every conversation into one place
Create your workspace in a few minutes, invite your team and start answering from one inbox.
Monthly subscription. Until online payment is connected, we activate plans by invoice.