Security & data
Your conversations, handled carefully.
A plain description of where your data lives, who can reach it, and what we do with it — including the parts of this product category that most vendors would rather not spell out.
Encrypted in transit
Every connection to Touchpoint uses TLS. Media is stored in private cloud storage and served only through authenticated, workspace-scoped requests.
Scoped to your workspace
Every table carries a workspace identifier and every query filters on it. Inside your workspace, roles and label-based access control who can see which conversations.
Backed up, and restorable
The database runs managed backups with point-in-time recovery. Restores are exercised rather than assumed — a backup nobody has tested is not a backup.
Your record stays yours
Chats, messages and tickets are exportable to CSV whenever you want. Leaving should cost you a download, not your history.
Access is restricted
Production access is limited and audited. We do not read message content for analytics or model training, and we never sell data.
Account protection
Password hashing, signed sessions, login rate limiting, and optional two-factor authentication for workspace owners and admins.
The part other vendors skip
How connecting a regular number actually works.
Touchpoint connects your existing WhatsApp number as a linked device — the same mechanism as WhatsApp Web. That is what makes this product possible without the Business API: no Meta approval, no message templates, no 24-hour reply window, and group chats that actually work.
It is also worth being straight about the trade-off. Connecting through an unofficial client is not something WhatsApp’s terms of service formally sanction. This is true of every tool in this category, including the ones that do not mention it. It cannot be engineered away — only managed sensibly.
How we manage it, and what we ask of you:
- We build for inbound, not outbound. Reading and replying to conversations customers started is low risk. Mass blasts and cold outreach to people who never messaged you are what actually get numbers banned, because recipient blocks and spam reports are the signal Meta acts on. We do not build bulk-sending features.
- Automated sends are paced. Anything the system sends on your behalf goes out at a human rhythm rather than in a burst, with per-number daily limits.
- Use a business number, not your irreplaceable one. Sound advice for any tool in this category, ours included.
- If you need formal guarantees, use the Business API. It is the officially sanctioned channel. It also costs per message, requires template approval, enforces a 24-hour reply window and cannot do groups — which is exactly why most teams end up here instead. We would rather you choose with that in front of you.
Compliance
Where we are today
We would rather tell you what is true now than list badges we are still working towards.
In place
TLS everywhere, workspace-scoped data access, private media storage, managed database backups with point-in-time recovery, restricted and audited production access, and full data export.
On the roadmap
Formal SOC 2 Type II attestation and a published subprocessor list. If your procurement process needs specific documentation before you can trial software, talk to us and we will tell you honestly where we stand.
Questions
Data questions
Who at Touchpoint can read my messages?
Nobody, as a matter of routine. Access to production data is restricted and audited, and we only look at specific content when you ask us to for support and give us permission. We do not read message content for analytics, training or marketing.
Is my data isolated from other customers?
Yes. Every record carries a workspace identifier and every query is scoped to it, so one workspace cannot reach another’s conversations. Within your workspace, roles and label-scoped access decide who sees what.
What happens to my data if I cancel?
You can export your chats, messages and tickets at any time while your account is active. After cancellation we retain data for a limited wind-down period so you can come back or export, then delete it. Ask us and we will delete it sooner.
Do you train AI models on my conversations?
No. AI features send the specific thread you asked about to a model provider to produce a summary or suggested reply for you. Your conversations are not used to train models, ours or anyone else’s.
Stop running your best channel off a phone in a drawer.
Connect your first number in five minutes. Keep the number, keep the history, and finally see the whole thing.
No credit card required.