Trust and security

Your conversations and your data, protected by design.

Every call, chat and WhatsApp message OyeHello handles carries real customer data. We built the platform to encrypt it, restrict who can reach it, and enforce calling rules before every call goes out.

How we protect data

Security built into every layer.

01

Encryption everywhere

Calls, chats and WhatsApp messages travel over TLS. Recordings, transcripts and your stored credentials, such as webhook secrets, API tokens and WhatsApp access, are encrypted at rest.

02

Role-based access

Owner, admin and member roles, plus read, write or admin rights on each area, from agents and billing to compliance. Invite teammates by email and remove them just as fast.

03

Safer sign-in

No passwords to leak. Sign in with Google or a one-time email code, and add authenticator-app two-factor on top.

04

API keys with scopes

Give each key only the permissions it needs. Keys are shown once and stored only as a fingerprint, you can see when each was last used, and revoking one takes effect at once. Test keys never dial.

05

Signed webhooks

Every webhook delivery is signed so you can check it came from us. Failed deliveries are retried and can be replayed, and private network addresses are blocked.

06

Tamper-evident audit trail

Every compliance decision is recorded in a chain where any edit shows. Verify it, and export it as CSV or PDF for a regulator.

07

Isolated tenancy

Each workspace's data is logically separated so one customer's records never mix with another's.

08

Customer numbers masked

Customer phone numbers are masked on screen, so a teammate sees +91 98•••• 5678 unless they need the full number.

09

You choose the AI disclosure

The opening “this is an AI assistant” line is a setting on each agent, so turn it on where your rules or your customers expect it. Calls are recorded for your workspace by default.

Calling compliance

Compliance enforced before every call, not bolted on.

The platform checks calling windows, consent and do-not-call lists before an agent ever dials, and honours opt-outs on WhatsApp too. Rules run automatically, so a campaign cannot step outside them.

01
Calling windowsAgents only dial inside the hours you're allowed to.
02
DND and NCPR scrubbingNumbers on do-not-call lists are filtered out before any call.
03
Consent trackingOpt-outs, including a STOP reply on WhatsApp, are recorded and honoured across your whole workspace within seconds.
04
Frequency capsContacts can't be over-contacted beyond the limits you set.
Pre-call checks
Gate · +91 98••• ••210
Calling windowAllowed
DND / NCPR listClear
Consent on fileValid
Frequency capWithin
VerdictCleared to dial
Data handling

You stay in control of your data.

01

Data residency

Choose India (Mumbai) storage when you sign up. WhatsApp shows when it keeps a number’s messages at rest in India.

02

Export anytime

Pull your contacts, transcripts and call records whenever you need them.

03

Erasure on request

Erase one person’s data, including transcripts, recordings and WhatsApp messages, from the console or the API. Their number is added to your do-not-call list automatically.

04

Never sold

We do not sell your call or chat content, and we do not use it to train foundation models for third parties.

05

Chat locked to your website

The public key for the website chat widget only works on the website addresses you list.

06

Your WhatsApp account stays yours

Messages run on your own WhatsApp Business account. Disconnect at any time.

Found a vulnerability?

We take reports seriously and respond fast. Reach our security team directly and we will work with you on a fix.