WeHub
מעבר לעבריתSign inBook an intro call

Security and privacy

Encryption, role-based permissions and two-factor authentication protect your business data, and you decide who sees what, where it is stored and when it is deleted.

Privacy and data storage

Your business data stays yours: you decide who sees what, and you can export it or ask for it to be deleted at any point.

  • The data belongs to the business: a full export to a file at any point, and full deletion on request.
  • Cloud storage in Europe (Frankfurt), with regular backups and high availability.
  • An agent sees only what their permissions allow, by role and by department.

Encryption

Data is encrypted both while it is stored and while it moves across the network.

  • Encryption at rest: data is encrypted in the database, not only while in transit.
  • Encryption in transit: every connection between the browser, the app and the server is encrypted.
  • Channel secrets are displayed masked in the interface, never as plain text.
  • Media is kept in private storage and served only through a secure, time-limited link.

Identity and permissions

One identity per person, and a separate membership in each business.

  • Two-factor authentication with TOTP or SMS, plus recovery codes for every user.
  • A business can require two-factor authentication for its entire team.
  • Four roles with precise permissions: owner, admin, agent and viewer.
  • IP allowlisting for sign-in, on the plans that carry it.

Audit and transparency

A sensitive action leaves a row, including when WeHub staff perform it.

  • An audit log for sign-ins, permission changes, channel connections, exports and plan changes.
  • A WeHub support session is time-limited, shown in a prominent banner and recorded in the log.
  • Support sessions are read-only by default. Writing requires the business owner's approval.
  • The logs mask tokens, secrets and full phone numbers, and never carry message content.

Privacy and regulatory readiness

Your rights under Israeli privacy law are implemented in practice, not only stated.

  • Compliance with Israeli privacy law and its data-security regulations.
  • Data deletion on request: a business can ask for its data to be fully deleted.
  • A full export of the business data at any point, recorded in the audit log.
  • Terms of service, privacy policy, cookie policy, a data processing agreement and an accessibility statement (IS 5568, level AA), in Hebrew and English.

Start with a call, end with a live channel

After the intro call we open your account, and a short wizard connects the first channel and invites the team. It ends by having you message yourself and watch it land.

Book an intro callTalk to us