Security and your data
Short version: we hold the text of conversations your own connected channels already received, we use it to produce your reports, and we do not sell, share or train on it. Everyone who processes it for us is named below.
What we store
Conversation messages
Direction, timestamp, the text, and who sent it: the customer’s phone number or account id, and the name shown on a public comment. This is what the report is computed from.
Raw event log
A copy of each event Meta sends to our server, exactly as sent. Today it is not linked to a workspace and is not deleted automatically. We delete matching events by hand on request.
Your workspace
Business name, locations, staffed hours, your email and a hashed password. Passwords are stored as bcrypt hashes and cannot be read back, by us or anyone.
What we do not store
No card details: payments run through Stripe and the card never touches our servers. No customer profiles, no address books, no contact exports.
Where it lives
DigitalOcean: a managed PostgreSQL database in Singapore, with the application on a single server in the same region. A workspace’s messages and reports are read by tenant id on every query, and that scoping has its own automated test.
Who else touches it
| Service | What it receives | Why |
|---|---|---|
| Meta (WhatsApp Business Platform, Facebook, Instagram) | Delivers your conversations to us | The connection itself. Ardito is a verified Meta Tech Provider. |
| DigitalOcean | Everything we store | Our application server and managed PostgreSQL database, in Singapore. |
| Anthropic (Claude) | The text of an answered conversation. The customer’s phone number or account id is not attached; anything written inside a message is sent as written. | Reply-quality grading, on the Coach plan only. Not used for training. |
| Cloudflare | Our outgoing email, including the weekly summary, which can quote the first 90 characters of unanswered customer messages. Also email sent to hello@arditohq.com. | Cloudflare Email Sending and Email Routing. |
| Stripe | Your billing details | Subscriptions. Card data never reaches us. |
| Messages sent through our contact form, forwarded to our Gmail inbox. Your IP address when a public page loads its fonts. | Gmail and Google Fonts. |
That is the complete list. If it ever grows, this page changes before the feature ships.
Your controls
Disconnect a Page or Instagram account
Pressing Disconnect on the Connect page tells Meta to stop sending that account’s events. A Page and its linked Instagram account share one subscription, so Meta keeps sending until neither is connected; Ardito stops recording the one you disconnected. Disconnecting WhatsApp is by email to hello@arditohq.com for now.
Delete everything
Email hello@arditohq.com from your account’s email address, as the data deletion page explains. We delete the workspace, its conversations, its reports and the matching raw events by hand within 30 days. It is not self-serve yet, and database backups expire on DigitalOcean’s own schedule.
Grading only on Coach
Conversation text goes to Anthropic only for workspaces on the Coach plan. There is no per-workspace switch yet. The weekly summary email can quote unanswered messages on any plan.
Sessions
Logging out removes the session from your browser. Resetting your password signs out every other session at once.
See it on your own numbers
Upload one WhatsApp chat and see in seconds which customers were never answered or waited too long. Free, no account, and your file is not kept. If nothing is being missed, you will know that too.
Run your free Missed-Lead AuditWant every chat at once? Connect WhatsApp and Ardito audits the last 180 days of enquiries.