Security

Security is central to how we build and run OGIR. This page summarises the measures we use to protect your data and your customers' data.

Official, compliant APIs

OGIR runs on the official WhatsApp Business API and the official Instagram Graph API. We do not use unofficial bots, which keeps your accounts compliant and reduces the risk of bans.

Data protection

• Data in transit is encrypted using TLS/HTTPS.
• Access to production systems is restricted, authenticated and logged.
• We follow least-privilege access for our team.

Infrastructure

OGIR is hosted on reputable cloud infrastructure with regular security updates and backups.

Payments

Payments are processed by PCI-compliant payment providers. We do not store full card numbers on our systems.

Your team's access

Role-based access lets you control what each team member can see and do inside your OGIR account.

Responsible disclosure

If you believe you have found a security vulnerability, please report it to us so we can investigate promptly. We ask that you do not publicly disclose the issue until it has been resolved.

Your role

Please help keep your account safe by using a strong, unique password and keeping your login credentials confidential.