Your workspace holds your customers' chats, phone numbers, quotations and invoices. This page explains, in plain words, how Sociolync protects that data, what you can do with it yourself, and what we do if something goes wrong.

1. Your data is encrypted

In transit: the website and the platform use HTTPS, so everything between your browser and our servers is encrypted.
Secrets at rest: WhatsApp, Meta and LinkedIn access tokens, email (SMTP) passwords and payment keys are stored encrypted with AES-256.
Passwords: stored only as one-way bcrypt hashes. Nobody, including our team, can read your password.
Payments: handled by Razorpay. Card, UPI and bank details never reach our servers.

2. Only your team can see your workspace

Every record carries your workspace ID and every page checks it, so one business can never see another business's data.
Admins choose which features each team member can use.
Our support team opens a workspace only to help you with a problem you raised.

3. Sign-in protection

2-step sign-in: after the password, a 6-digit code is sent to the user's WhatsApp, SMS or email. Every code expires in 60 seconds.
Trusted devices: a user can trust their own computer for 30 days; changing the password removes all trusted devices.
Lock-out: repeated wrong passwords temporarily block sign-in for that account and IP address.
Sign-in history: admins can see who signed in, when, how and from which IP address.

4. Nothing is lost by mistake

Recycle bin (90 days): when anything is deleted (a customer, an invoice with its items and payments, a contact with all their chats), a full copy is kept for 90 days. Your admin can restore it in one click from Privacy & Data → Recycle bin.
Daily backups (14 days): the whole platform database is backed up every day and stored outside the public web folder.
Audit log: every deletion, restore, export and data request is recorded with who did it, when, and from which IP address.

If data disappears without your knowledge: tell us at info@shalominfotech.com or on WhatsApp at +91 93451 22554 / +91 70106 67241. We check the audit log to see exactly what happened and who did it, and restore the data from the recycle bin or from the daily backups.

5. Tools for the DPDP Act, 2023

Under India's Digital Personal Data Protection Act, your business is the "Data Fiduciary" for your customers' data and Sociolync processes it on your behalf. Sociolync gives you the tools to meet your duties:

Find a person: search by phone, email or name across customers, contacts, chats, quotations, invoices and orders.
Access requests: download everything you hold about a person as a ZIP file.
Erasure requests: erase a person's data in one step. Customers with invoices keep only what tax law requires; their phone, email and address are removed.
Request register: record every request (access, correction, erasure, consent withdrawal, grievance) with a 30-day due date.
Consent: anyone who replies STOP stops receiving marketing messages automatically.
Retention: choose how long chat messages and logs are kept; older data is deleted automatically each day.
Your own grievance officer: record who handles your customers' privacy complaints.
Full export: download all your workspace data at any time; you are never locked in.

6. Messaging safely on WhatsApp

We use the official WhatsApp Business Platform (Cloud API) from Meta.
Opt-outs, daily sending limits and automatic pauses on spam reports protect your number and your customers.
Messages pass through Meta only to deliver them. We never sell your data or use it for advertising.

7. If something goes wrong

If we discover a security incident that affects your data, we will inform you without delay, tell you what happened and what we are doing about it, and report it to the authorities as Indian law requires.

8. Questions

Email info@shalominfotech.com, or WhatsApp / call +91 93451 22554 or +91 70106 67241. Read our Privacy policy and data deletion instructions.

Security & data protection