New: the Instagram inbox is now included free on every plan.

Nudgebolt nudgeblt
WhatsApp data security

Your customers’ data, held like it’s theirs.

Credentials are encrypted at rest and never shown again. Every workspace is isolated by the database itself. Every company that touches your data is named. And your conversations and documents never train any AI model.

Every plan

app.nudgebolt.com/settings/audit
Meta access token Encrypted · never shown
Workspace data Isolated by the database
AUDIT LOG
M Meera exported contacts (CSV) 10:42
R Rohan changed an assignment rule 09:15
Y You invited asha@ as Agent Yesterday
Y You reconnected WhatsApp number Mon
Credentials encrypted at rest
Workspaces isolated by the database
Never used to train AI
Why it matters

“We take security seriously” is not a disclosure.

Your customers’ phone numbers and conversations are the most sensitive thing your business holds on WhatsApp. You should know exactly where they are stored, who processes them, and what happens when you leave.

What it does

Everything in security & data.

Your number, your Meta bill, your data — visible, exportable and yours to take with you.

Encrypted credentials

Your Meta and Instagram tokens are encrypted before storage and never returned to the interface or a log.

Database-level isolation

A query from your workspace cannot return another workspace’s rows, even if the code asking is wrong.

No AI training

Conversations and knowledge-base documents are never used to train any AI model.

Audit log

Significant actions are recorded with who did them and when.

Named processors

Every company that sees your data is named in the privacy policy, with what it sees.

Export and delete

Export contacts and chats as CSV; close the account and your workspace is deleted within 30 days.

01 · IN DETAIL

Two roles, clearly split

For your account, we decide what is collected and why. For your contacts and their messages, you decide — we hold that data on your instructions and process it only to run the features you switch on. When one of your customers asks for their data or its deletion, we do our part.

  • You control your customers’ data
  • We help answer their requests
  • Deletion routes published
02 · IN DETAIL

What we never hold

Card and UPI details go to Razorpay directly and never touch our servers. Credentials are never stored readable. Another workspace’s data is unreachable from yours. Raw webhook records are deleted after 30 days, automatically.

  • No card or UPI details
  • No readable credentials
  • Webhook records aged out at 30 days
How it works

Set up security & data in three steps.

  1. 01

    Read the policy

    Written from the software, not a template.

  2. 02

    Control access

    Invite your team with roles; every significant action is logged.

  3. 03

    Leave cleanly

    Export everything; your workspace is deleted within 30 days of closing.

Straight answers

Security & data, answered.

The questions people ask before they switch it on.

On servers hosted by KnownHost in the United States. Every company that processes your data, and where, is listed in our privacy policy.

No. Neither your conversations nor your knowledge base are used to train any AI model — ours or anyone else’s.

Some of it you remove yourself — a list, a lead source, a template. An individual contact and their message history we delete on request. The data-deletion page sets out every route.

Export contacts and chats as CSV first. When you close the account we delete the workspace and its data within 30 days, except billing records Indian tax law requires us to keep.

Try security & data on your own number.

14 days of Growth, free. No card — and your number stays yours whatever you decide.

WhatsApp Channel

Get our updates where you already read messages.

Product updates, Meta pricing changes and short how-tos. Your number stays private; mute or unfollow anytime.