Trust and security
Your customers tell you things in chat. Here is how Chatyol keeps it safe, in plain words.
How we keep chat data safe
What the app does today. No badges we haven’t earned.
Built on Cloudflare
The app, the widget, the API and live connections run on Cloudflare. The database is PlanetScale Postgres, reached over TLS.
Encrypted in transit
Every page, API call and live connection uses HTTPS or secure websockets. Passwords are stored as Argon2 hashes, never as text.
Files stay private
Files sent in chats sit in private storage. They open only through signed links that expire; the storage itself is never public.
Secrets are encrypted
Keys for AI providers are encrypted at rest with AES-256-GCM. Website secret keys never leave the server.
Visitors can’t pose as others
Signed identify ties a chat to a signed-in customer with an HMAC made on your server, and website keys only work on your domain.
Every change is recorded
The audit log records who changed what: assignments, personas, agents, settings, domains and blocks (Scale).
Roles and workspaces
Owners, admins and agents. Agents only see the workspaces they are given.
Your data stays yours
We never sell chat data or use it for advertising. AI providers receive chat text only to make a suggestion, a summary or a translation.
Policies
Privacy Policy
What we collect, how we use it and your rights.
Terms of Service
The terms for using Chatyol.
Identify visitors
How signed identify works.
Security questions?
If your team has a security questionnaire, or you think you found a security issue, email us.
security@chatyol.comChatyol is owned and operated by PT Brokeret Fintech Solutions. It is the data controller for this website and sign-ups, and the data processor for the chats on customers’ websites.
Bring every brand into one inbox
Tell us about your brands and websites. We set up your workspaces with you and you paste one script tag.