Your customers trust you. We take that seriously.

• Where your data lives

  Your account, conversations and documents are stored on Amazon Web Services in Singapore (ap-southeast-1).

  Some processing happens with providers outside Singapore, such as AI replies and Meta delivering WhatsApp messages. Each provider and its location is listed in section 6 of our privacy policy.

• Every business walled off

  Each business is isolated at the database row: row-level security in PostgreSQL covers every table that holds customer data, and every query also filters by business as a second layer.

  Your channel credentials, such as WhatsApp and Facebook access tokens, are encrypted with AWS KMS. They are never stored in plain text.

  Everything travels over HTTPS with TLS 1.2 or newer.

• AI and your data

  AI replies are generated by AI providers in the United States, as our privacy policy states. Under their commercial terms they do not train their models on the conversations we send.

  Your AI employee answers from the documents you give it, within the guardrails you set. When your documents do not cover a question, it hands the chat to a person instead of guessing.

  You can turn the AI off for one conversation, for one customer, for everyone at once, or run with AI off entirely, on any plan. Your team keeps working in the same inbox.

• Access and audit

  Every teammate signs in as themselves, with a role that sets what they can see and change.

  Meaningful actions are written to an append-only audit trail, so there is a record of who did what and when. Scale can export it.

  Card payments are handled by Stripe. ezychat never stores card numbers.

• Malaysia and Singapore PDPA

  ezychat is written for Malaysia's Personal Data Protection Act 2010, as amended in 2024, and Singapore's Personal Data Protection Act 2012.

  For your customers' conversations, your business is the data controller and ezychat acts as your processor, on your instructions.

  Our privacy policy names our Data Protection Officer and explains how we handle access and deletion requests and data breach notification.

• Report a security issue

  If you think you have found a vulnerability, email support@ezychat.io with "Security" in the subject and the steps to reproduce it.

  Please give us a reasonable time to fix it before you share it, and don't access or change other people's data while testing.

Read the full privacy policy, our terms of service and the cookie notice.