Security

Each client workspace’s leads, connections, sheets, automations and reports are separated in the database itself with row-level security, not only in the app. A request can only ever reach the workspace its user belongs to.

An automated isolation report checks every day that every table is protected, nothing is readable without signing in, token columns are unreadable and no record points into another workspace. Our automated tests check the same on every change.

• We request only the Facebook permissions the features need, and show you which ones you granted.
• Access tokens are encrypted with AES-256-GCM before storage and never shown again.
• Every webhook from Meta is verified against Meta’s signature before it is read.
• When you disconnect a Page or remove the app in Facebook, we delete its tokens.
• Data sent to the Conversions API uses Meta lead IDs and SHA-256 hashed email and phone numbers.

• Four roles: agency admin, client admin, sales manager and sales rep. Reps see only their own and unassigned leads.
• People join only by accepting an invitation; seats can’t be shared.
• Sign-in by email link or password; leaked-password checks are available.
• An audit log records who changed settings, connections, team access, automations and billing, without storing lead contact details.

• HTTPS everywhere; hosting on Vercel (Mumbai region) and a managed Postgres database with encryption at rest and backups.
• Background jobs retry safely without sending anything twice; Conversions API events are sent once per stage and lead.
• Health checks and daily monitoring of event delivery, missed leads and configuration.

See the full list of providers on our Subprocessors page.

Export all leads, set an automatic retention period, delete a workspace, and handle people’s deletion requests from the Admin page. People can ask for deletion themselves on our data deletion page.

Email the email address shown in your account with the details. Please give us reasonable time to fix the issue before disclosing it, and do not access other customers’ data or disrupt the Service while testing. We will acknowledge your report within 2 business days.