Security

Your team signs in with the role you give it, and your customers opt out with one word. Behind the scenes, Hellotext encrypts your store’s credentials and backs up your data every day.

No card to get started

Three pieces of Hellotext with a demo store: the store’s team with each person’s role, a customer replying STOP to a back-in-stock message, and their profile, now unsubscribed.

Trusted by companies across industries

Lego Crocs New Balance Yango Juguetron Pro Champions Bata Rimax Carsa Quality Products Auros Funkyfish Only Natural Yale Pical banda.shop AdeE Lego Crocs New Balance Yango Juguetron Pro Champions Bata Rimax Carsa Quality Products Auros Funkyfish Only Natural Yale Pical banda.shop AdeE

What you control in the app

Who signs in and what they can do, who you message and when: every control is in the app, in plain sight for your team.

  • A role for each person

    Agents handle conversations and contacts. Billing, channels and API tokens stay with the owner and administrators.

  • Sending hours

    Messages from your Campaigns and Playbooks don’t go out during the hours you choose. Campaigns also wait for each country’s allowed hours.

  • Sign in with your work account

    Your team signs in with their Microsoft work accounts, with no other password. Signing in with Google works on every plan.

    On the Enterprise plan.

  • Who did what

    Every conversation keeps who assigned, labeled, snoozed or closed it, and when.

What we look after behind the scenes

What you don’t see in the app is built to protect your data too.

  • Encrypted connections

    Hellotext runs only over HTTPS, and HSTS tells your browser never to connect without encryption.

  • Your store’s credentials, encrypted

    Keys for Shopify, VTEX, WooCommerce, Wix, Magento, Mercado Libre and Meta are stored encrypted.

  • Cards with Stripe

    Stripe receives your card number and security code. Hellotext never stores them.

  • A backup every day

    Every day, an encrypted copy of the database is stored away from our servers.

  • Protected passwords

    They’re stored with bcrypt, never in plain text, and deleting your account or a business asks for your password.

  • Logs without secrets

    Passwords, tokens, keys and codes are filtered out of the app’s logs.

  • Continuous monitoring

    We monitor the app in real time and update its dependencies every week.

  • Official WhatsApp

    Hellotext connects to Meta’s official WhatsApp Business Platform, and proactive messages use approved templates.

Privacy, laws and documents

Hellotext processes your customers’ data to provide the service, following your instructions.

The laws we follow

  • Uruguay

    Law 18.331

    On personal data protection. Our databases are registered with the Personal Data Regulatory and Control Unit.

  • European Union

    GDPR

    The General Data Protection Regulation.

  • Colombia

    Law 1581 of 2012

    On personal data protection.

What we commit to

  • We tell you right away

    If there’s a personal data breach, we write to you by email.

  • Confidentiality

    Everyone who handles your data is bound to confidentiality and trained in data protection.

  • Your data comes back to you

    When the service ends, we return your data and delete it, except for the copy the law requires.

Documents

Does your team need to fill in a security questionnaire?

Write to us

Data protection: privacy@hellotext.com

FAQ

Frequently asked questions

Who on my team can see my customers’ data?

Everyone on your team sees conversations and contacts. Roles change what they can do: agents handle conversations; managers also run Campaigns and can delete contacts; billing, channels and API tokens stay with the owner and administrators.

What happens when a customer asks to stop receiving messages?

If they reply STOP, UNSUBSCRIBE or a similar word, even misspelled, they’re unsubscribed. From then on, your Campaigns and your Playbooks’ marketing messages don’t reach them. If they write to you, your team can still reply.

Does Hellotext have single sign-on (SSO)?

Yes, with Microsoft Entra ID, on the Enterprise plan: your team signs in with their Microsoft work accounts. On every plan, people can also sign in with a Google account.

Does Hellotext store my card details?

No. Your card number and security code are entered in Stripe. Hellotext keeps a Stripe reference and a summary of the card, such as its brand, last four digits and expiry date.

What happens to my data if I leave Hellotext?

Under the data protection agreement, when the service ends Hellotext returns the personal data and deletes it from its systems, except for the copy it must keep for legal periods. Before you leave, you can export your lists and segments as CSV.

What uptime does Hellotext offer?

Enterprise contracts can include an SLA of 99.5% monthly uptime, with credits if we miss it. Service status is published at status.hellotext.com.

Does Hellotext use the official WhatsApp API?

Yes. Hellotext connects to Meta’s official WhatsApp Business Platform. Proactive messages use approved templates and follow WhatsApp’s messaging windows, limits and policies.

Who do I contact about privacy or security?

For data protection, write to privacy@hellotext.com. For a security questionnaire or any other question, write to us from the contact page.

Your data and your customers’, protected

Create your free account, no card needed.