Encrypted in transit
Every connection to TalkRobin, from the dashboard, the widget and our APIs, uses HTTPS.
SECURITYPrivate by design.
Private by design.
Secure by default.
Your conversations and your visitors’ trust are the whole point of TalkRobin. Here is how we protect them.
Masked by default
What visitors type is hidden in session replays before it leaves their browser, unless a site owner chooses to show it. Passwords and card numbers are never recorded.
Separated data
Each business’s conversations, contacts and visitor data are kept separate, and every request is checked against the account it belongs to.
Two-factor sign-in
Every team member can protect their account with an authenticator app and backup codes.
Role-based access
Administrators decide who can see which websites and inboxes, and who can change settings.
Consent mode
Hold back all visitor tracking until your visitor agrees, with one attribute on the install code.
Hardened infrastructure
Services run behind a firewall with internal systems password-protected, abuse rate limits on public endpoints, and regular backups.
Minimal access
Only the people who need production access to run TalkRobin have it, and customer data is never used for anything but providing the service.
YOUR DATA, YOUR RULES
You stay in control.
You own your content and your visitors’ data. Export it or delete your account from the dashboard at any time, and we delete it from our systems within 30 days, and from backups within 90.
Read how we handle personal information in our privacy policy, our data processing agreement and the list of subprocessors.
Visitor history is kept for 7 days on Free and 90 days on Pro and Business, and then it’s gone from your dashboard.
Retention you can see on your plan page RESPONSIBLE DISCLOSURE
Found a vulnerability?
We welcome reports from security researchers and will work with you to fix real issues quickly. Please email security@talkrobin.com with a description, the steps to reproduce it and the impact you observed.
- Give us reasonable time to fix the issue before sharing it publicly.
- Only test against your own account. Don’t access, change or delete other customers’ data.
- Don’t run denial-of-service tests, spam or social engineering against our team or customers.
We will confirm receipt within 3 business days, keep you updated, and credit you (if you’d like) once the issue is resolved. We won’t pursue legal action against good-faith research that follows these guidelines.
Security team
Report issues to security@talkrobin.com.
THOUGHTFUL NEXT STEPS
Make privacy part of your setup.
Product safeguards work best alongside thoughtful website configuration and clear visitor communication.
Your next customer is on your website right now.
Free forever plan · Setup in 2 minutes · No credit card
