Security and privacy
Privacy depends both on access within ONOICHAT and on who owns the messaging account. These service rules and limitations matter before connecting.
The account owner can see conversations
The account owner can see all conversations in the native app. ONOICHAT visibility rules apply only within ONOICHAT. They do not hide messages in WhatsApp, Instagram or Telegram. A reply from the native app may be treated as a reply outside ONOICHAT without assigning a team member.
Telegram requires a work account
Use a separate account with no personal chats. Check bot access to existing and future chats and exclude personal ones. Before connecting, the director must confirm it is a work account with no personal chats.
Team and support access
Company data is separated; staff work with the queue and their own customers within their assigned access. Support is not given permanent content access: access is allowed on a company request, for a limited time, with an audit record. Do not include customer conversations in ordinary emails to our public address.
Passwords and channel secrets
Service rules require passwords to be stored only as hashes and channel tokens encrypted on the server. Do not email secrets. Check the page address before entering credentials and revoke access for former staff. These measures are not a promise that all risks are eliminated.
Data and deletion
Customer profiles, messages and attachments are processed for company operations. A company can request deletion of all company data or a single customer’s data. Copies in messaging services and on participants’ devices require separate requests to their owners. See the privacy policy and data deletion instructions for details.
Report a problem
Email hello@onoichat.com with a short description and a way to contact you. Do not attach passwords, tokens, conversation content or unnecessary personal information. We will agree on a separate secure way to share details.