--- title: "Security at ConvoBox | ConvoBox Inc" description: "A plain overview of how ConvoBox protects accounts on the official WhatsApp Business API, role-based access, responsible disclosure, and what we do not claim." url: https://www.convobox.in/security/ publisher: ConvoBox Inc --- [Legal](https://www.convobox.in/legal/) · Policy # Security at ConvoBox A plain overview of how we protect your account, and how to report a vulnerability. **Last updated:** 8 November 2026**Effective:** 8 November 2026**Provider:** ConvoBox Inc, Bengaluru and Salem, India Contents 1. [Official WhatsApp Business API](#official) 2. [Access control](#access) 3. [Integrations](#integrations) 4. [Data in transit](#transit) 5. [What you can do](#customer) 6. [Data processing](#processing) 7. [Responsible disclosure](#disclosure) 8. [What we do not claim](#not-claim) ConvoBox runs on the official WhatsApp Business API through Meta. Teams get their own admin and agent logins with role-based access. We do not ask you to share passwords. If you find a security problem, tell us at info@convobox.in or info@convobox.in. We list below what we do not claim. ## Official WhatsApp Business API ConvoBox is an Official Meta Tech Partner and uses the official WhatsApp Business API. Messages are sent and received through Meta's approved channel, not through unofficial tools or browser automation that can put your number at risk. ## Access control - Each person on your team gets their own login. Use admin and agent roles to limit what each person can see and do in the team inbox, on the web and in the Android app. - Do not share one login between several people. Remove access when someone leaves. - ConvoBox staff will never ask you for your password. ## Integrations Where an integration supports it, such as the Google Sheets add-on and the Shopify app, ConvoBox connects through the platform's official sign-in and permission screen (OAuth) instead of asking for your password. The permissions we request are listed in the [Privacy Policy](https://www.convobox.in/privacy-policy/). You can revoke access from the other platform at any time. ## Data in transit Traffic between your browser or the Android app and ConvoBox is sent over encrypted connections (HTTPS). ## What you can do - Use a strong, unique password and keep it private. - Give team members only the role they need. - Review your team list regularly. - Tell us at once if you suspect unauthorised access. ## Data processing Our role and yours for customer contact data is explained in the [Data Processing Terms](https://www.convobox.in/data-processing-addendum/) and [Data Protection and DPDP Act](https://www.convobox.in/data-protection-and-dpdp/). ## Responsible disclosure If you think you have found a security problem in ConvoBox, please tell us first. 1. Email [info@convobox.in](mailto:info@convobox.in) with a clear description, the steps to reproduce it and the impact you see. 2. Give us a reasonable time to fix the issue before you share it publicly. 3. Do not access, change or delete other people's data, disrupt the service, or run tests such as spam, social engineering or denial of service. 4. Only test with accounts you own. We will acknowledge your report, look into it and keep you updated. We act in good faith toward researchers who follow these rules. We do not currently run a paid bug bounty programme. ## What we do not claim To avoid overstating, here is what this page does not say. We do not claim any security certification or audit report. We do not publish penetration test results. We do not offer an uptime guarantee here. We do not state data-centre locations or encryption-at-rest details on this page. If you need specifics for a security review, write to [info@convobox.in](mailto:info@convobox.in) and we will answer what we can in writing. **Related:** [Data Processing Terms (DPA)](https://www.convobox.in/data-processing-addendum/) [Privacy Policy](https://www.convobox.in/privacy-policy/) [Data Protection and DPDP Act](https://www.convobox.in/data-protection-and-dpdp/) [Acceptable Use and WhatsApp Messaging Policy](https://www.convobox.in/acceptable-use-policy/) Write to us and we will reply. You can also reach ConvoBox Inc at [info@convobox.in](mailto:info@convobox.in), or call or WhatsApp [+91 73385 19445](https://wa.me/917338519445). This page is a plain-language document written in good faith. It is general information and not legal advice. --- Source: https://www.convobox.in/security/ · © ConvoBox Inc