# Roddely trust and security: how we protect your data

> How Roddely protects your store and your customers' messages: the official Meta connection, where data lives, encryption, two-factor sign-in and data deletion.

Roddely answers your customers on WhatsApp, Instagram, Messenger, Telegram and your website chat, so it works with your products and your customers' messages every day. Here is how we collect, use, host and protect that data, and how you delete it whenever you want.

We take only what the service needs to answer your customers, and we never sell your data.

What we keep
Your account details, the products, prices and store information you teach Roddely, your customers' messages and the replies sent to them, and the comments on posts of the Pages you connect.

What we use it for
To run the service and answer your customers, to make replies more accurate, to help you when you ask for support, and to keep the service secure.

Who else sees it
Only the providers that run the service with us, such as hosting, AI processing and the messaging platforms you choose to connect, and they may use it only to provide that service.

How long we keep it
For as long as your account is active. When you delete your account, its data is removed as described below, except for records the law requires us to keep.

Roddely runs on Amazon Web Services (AWS) in the European Union, in the EU region closest to Egypt, and the data is backed up every day.

Every connection to Roddely is encrypted and protected by Cloudflare.

Encrypted in transit and at rest
Data is encrypted while it travels between you, your customers and Roddely, and encrypted again while it is stored.

Every incoming message is verified
Every message from WhatsApp, Instagram or Messenger arrives signed, and Roddely checks that signature before it handles the message, so only genuine messages reach your inbox.

Two-factor sign-in
Turn on two-factor authentication in Settings with an authenticator app, and keep the one-time recovery codes in case you lose your phone.

Keys stay on the server
Service keys are kept in AWS's secure parameter store and used only on our servers, and they never reach the browser.

You decide what is connected
You approve each Meta channel's permissions on Meta's own screen, and you can disconnect any channel from the Channels page at any time.

Stopped before it arrives
Cloudflare blocks suspicious traffic and attacks before they reach Roddely.

Disconnect a channel
On the Channels page, disconnect any channel you no longer want. Roddely stops receiving its messages and removes its connection details.

Delete your account
In Settings, delete your account with your password. Deletion is immediate and removes your account, the knowledge you taught Roddely, your channels and your whole conversation and comment history.

Or email us
Write to support@roddely.com from the email address on your account, and we handle your request within 30 days.

If you are a shopper
Ask the store you messaged to delete the conversation, or email support@roddely.com with the store's name and the channel you used, and we delete your messages and comments.

## Does Roddely sell my data or my customers' data?

No. We never sell your data. We use it only to run the service and answer your customers, and we share it only with the providers that run the service with us.

## Where is my data stored?

On Amazon Web Services (AWS) in the European Union, in the EU region closest to Egypt. It is encrypted at rest and backed up every day.

## Can I delete all my data?

Yes. Delete your account in Settings and everything is removed immediately: your account, the knowledge, your channels and your conversation history. Or email support@roddely.com and we handle it within 30 days.

## Is the WhatsApp connection official?

Yes. Roddely is a Meta Tech Provider: your WhatsApp Business number connects to the official WhatsApp Cloud API through Meta's Embedded Signup, under your own business account.

## How do I protect my Roddely account?

Turn on two-factor authentication in Settings with an authenticator app, and keep your recovery codes somewhere safe so you can still sign in without your phone.