1. Official Meta Cloud API Usage

Unlike "unofficial" WhatsApp automation tools that use web automation (and risk your number getting banned), ChatlixAI is built exclusively on the Official WhatsApp Business Cloud API hosted by Meta.

• Direct Connection: Your messages go directly to Meta's servers.
• Zero Ban Risk: Official API usage complies with all WhatsApp Terms of Service.
• Data Handling: We follow Meta’s stringent data processing guidelines to maintain our status as a trusted technology provider.

2. Data Encryption

Security is not an option; it's a default setting. We protect data in two states:

In Transit

All data moving between your browser and our servers, or between ChatlixAI and Meta, is encrypted using TLS 1.2 or higher (SSL). This prevents any "man-in-the-middle" attacks.

At Rest

Sensitive information such as API keys and credentials are encrypted at the database level using industry-standard AES-256 encryption.

3. Infrastructure Security

Our platform is hosted on world-class cloud infrastructure providers (like AWS/DigitalOcean) that are compliant with global standards.

• Firewalls: We use Advanced Web Application Firewalls (WAF) to protect against DDoS attacks and SQL injections.
• Monitoring: 24/7 real-time system monitoring to detect and respond to any unusual activity instantly.
• Backups: Encrypted backups are performed daily and stored in multiple geographic locations to ensure data durability.

4. User & Internal Access Control

We ensure that only authorized people can access your business data.

• Role-Based Access (RBAC): Within your ChatlixAI dashboard, you can assign roles (Admin, Agent, Manager) to limit what your employees can see or do.
• Internal Access: Our employees only access your account data when explicitly requested by you for support purposes. All internal access is logged and audited.
• Two-Factor Authentication: We recommend all users enable 2FA for their Meta Business Manager accounts for an added layer of protection.

5. Regulatory Compliance

Rablik Private Limited is a registered Indian entity, and we comply with local and international data protection best practices.

• GDPR Ready: We respect user privacy rights and provide tools for data deletion and portability.
• Privacy by Design: We collect only the minimum data required to provide our service effectively.

6. Security Reporting

We believe in constant improvement. If you are a security researcher or a user who has discovered a potential security vulnerability, please report it to us immediately.

We take every report seriously and will investigate it as a priority.