Scoped access
Signed-in users are checked against their business membership and permissions before acting on connected WhatsApp accounts. Public registration is invite-gated.
Current controls · launch review in progress
Chatflow uses access checks and operational controls to protect customer workflows. We are still verifying parts of the launch setup, and we will say where that work stands.
For personal-data practices, read the Privacy Policy. Its inherited statements are under review for the independent Chatflow service.
Signed-in users are checked against their business membership and permissions before acting on connected WhatsApp accounts. Public registration is invite-gated.
The HTTPS production origin uses a secure session-cookie name. Authentication and server-side permission checks are part of the application flow.
Advanced code-bot tests, activation and execution are disabled while isolated execution is designed. Draft editing remains available.
The application checks business membership and role permissions for protected actions. Production operations include health checks and daily local backups.
Choose who can access your workspace, assign suitable roles, and remove access when a teammate leaves.
Connect only the WhatsApp Business accounts and integrations your team intends to use, and review who can operate them.
Local SQLite backup restoration has been tested, but off-host backup and restore are not yet verified. Owner access and the new-origin integrations still need configuration and end-to-end testing. Error detection, governance controls, and non-message data persistence remain under review. These checks must be completed before we describe the service as launch-ready.