Data and security

Your customers' data belongs to you. This page covers how SealReply protects it and the tools you have to manage it.

Encrypted storage

• Chats, visitor details and files are stored encrypted, with a separate key for each workspace.
• SealReply staff can't look at your data at will. When fixing a problem truly needs it, two people must approve and you're notified. Every such access is listed under Settings → Data and privacy.
• When you close the workspace, its encryption key is destroyed at once, so nothing stored can ever be read again by anyone.

How long chat history is kept

By default, as long as your plan keeps it. The owner can choose a shorter time under Settings → Data and privacy → Keep chat history for, for privacy or compliance. Closed conversations, messages, files and offline messages past that age are permanently deleted.

To guard against mistakes or a stolen account, a shorter retention takes effect only after 72 hours. We email you, and you can undo it until then.

A visitor asks for their data

When a visitor asks under privacy law (such as the GDPR) for a copy of their data, or for it to be deleted:

• Open their profile and click Export this visitor's data, or Delete all data about this visitor (profile, browsing trail, conversations, messages, files, ratings, leads and offline messages; it can't be undone).
• Or find the visitor by email under Settings → Data and privacy → Visitor data requests.

Teams with a developer can automate this with the API; see Data requests from your visitors.

Blocking and flood protection

• In a visitor's profile you can Block IP: nobody from that address can use the chat, and chats under way end. Manage blocks under Settings → Data and privacy.
• Sites → Visitor features → Flood protection limits how many messages a visitor can send per minute.

Account security

• Under Account security you change your sign-in email and password, turn on two-step verification, and see and sign out devices.
• The owner can require two-step verification for the whole team (Settings → Workspace security).
• The Activity log records which chats and visitors your team viewed, exports, blocks and setting changes. Nobody can edit or delete it.

The widget only loads on your sites

The widget only loads on your verified and allowed domains, so copying your code to another site doesn't work (unless you turned on "Allow any domain"). See Install the chat.