Two-step verification, sessions, data retention and deletion requests.
Works with Google Authenticator; turned on per account.
See where you're signed in and sign out in one click.
On the Security page you can see the devices where your account is signed in and sign out of any one of them, or all of them at once. When you change your password or deactivate a user, their sessions are signed out immediately anyway.
Decide how long closed conversations are kept.
If you set a retention period in days on the Security page, closed conversations past that period and their files are permanently deleted every day. Entering 0 means “keep them as long as my plan allows”.
Handle a GDPR/KVKK request from a single screen.
If a visitor asks for their data to be deleted, enter their email or visitor ID in the “Permanently delete visitor data” section of the Security page; that person's conversations, messages and files are permanently deleted. The action is recorded in the audit log.
If a visitor types a card number into the chat, it's hidden automatically.
Card numbers in visitor messages are masked before they're stored. It's on by default; you can turn it off per site in Settings, but we don't recommend it.
Who changed what, and when.
Sign-ins, failed sign-in attempts, 2FA changes, settings updates, channel and API key actions and data deletion requests are all written to the audit log. It's where you look back when something goes wrong.
