Security and privacy

Your leads are your business. We keep it that way.

How Kweliz protects the people who message you and the data you trust us with, in plain words.

Report a security issue

Data protection

Built for Nigeria’s NDPA and the EU GDPR. Every Kweliz form shows a consent line, and every lead can ask to be forgotten.

Where your data lives

Your data is stored in one region, {data region}, and backups stay there too. We tell you before that ever changes.

Encryption and access

Encrypted in transit and at rest. Two-step sign-in for every user, and admins can make it required.

Kept apart from other businesses

Every record carries your workspace ID, and the database itself refuses to return it to anyone outside your workspace.

The junk network

When a number is reported as junk, only a one-way hash of it is shared. Never names, chats, or which business reported it.

Audited access

Sign-ins, exports, setting changes and support visits are logged, and admins can read the log any time.

Support access you can see

If our team opens your workspace, you’ll know

Support can only enter a workspace after you approve it. Every visit is time-limited, shown as a banner to our team, and written to a log your admins can read.

Support access logSettings › Security
13 Oct, 14:02
Ada from Kweliz support
Viewed qualifier settings for 20 minutes
Approved
9 Oct, 10:15
Ada from Kweliz support
Request to check a Meta connection
Declined
2 Oct, 16:40
Tunde Bello (you)
Turned on required two-step sign-in
Change
28 Sep, 09:05
Ada from Kweliz support
Session ended after 30 minutes
Expired
Sub-processors

Who else handles your data

We tell customers 30 days before adding a sub-processor. Regions marked as placeholders are confirmed in the DPA.

NamePurposeRegion
Meta (WhatsApp Business Platform)Sends and receives qualifier messages{region}
CloudinaryStores visit photos and uploaded files{region}
PaystackCard and transfer payments in NigeriaNigeria
StripeCard payments outside Nigeria{region}
{hosting provider}Application hosting and database{region}
{email provider}Sign-in links and reports by email{region}

Data processing agreement

Our standard DPA covers the NDPA and GDPR, including the sub-processors above and how we handle deletion requests.

Report a security issue

Found something? Email us with the steps to reproduce it. We reply within two working days and keep you updated until it’s fixed.

security@kweliz.com

See your real cost per lead in two weeks

Start with a two-week baseline that records your leads without messaging anyone. Then decide.

Book a demo