Security

Clear boundaries. Minimal token exposure.

The frontend stays lightweight. Your backend remains the source of truth for auth, users, and platform credentials.

Backend is source of truth

User creation, authentication, and WhatsApp credentials live server-side.

No unnecessary secrets in UI

Provider tokens and sensitive credentials are not exposed to the browser.

Predictable flows

Centralized error handling, consistent endpoints, and controlled redirects.

Production-safe defaults

Designed to reduce accidental leakage via URLs, logs, and client storage.

Legal

Read our policies in plain language.