Skip to main content
Unecast is built for businesses that take data seriously. Every aspect of the platform - from where your data is stored to how your team accesses it - is designed with security and privacy as first principles. This page explains the technical and organisational measures Unecast has in place to protect your account and your customers’ data.

​
Security at a Glance

Hosted on AWS infrastructure

All customer data is hosted on aws-infrastructure, ensuring highest security and reliability to our services.

End-to-End Encrypted Messages

WhatsApp messages sent through Unecast are end-to-end encrypted between your business and your customers, ensuring no third party can read message content in transit.

No Training with Client Data

Your conversations are never used to train AI models - by Unecast or any of its providers. What you send stays private.

Two-Factor Authentication (2FA)

2FA is available on all Unecast plans. Add a second layer of protection to every team member’s login.

Role-Based Access Control

All team member roles are controlled by feature toggles, so everyone has exactly the access they need - and nothing more.

GDPR-Compliant Processing

Unecast’s architecture and data handling practices are designed for full compliance with the EU-General Data Protection Regulation.

​
Account Security Best Practices

Securing your Unecast account is a shared responsibility. Follow these steps to protect your workspace and your customers’ data:
1

Enable Two-Factor Authentication

Require a second verification step for every login. Go to Settings → Security → Two-Factor Authentication and enable 2FA for your account. Encourage all team members to do the same.
2

Apply the Principle of Least Privilege

Use role-based access control to assign team members only the permissions they actually need. Grant the Agent role for day-to-day messaging, and reserve the Admin role for those who need to manage settings, billing, or integrations.
3

Review and Remove Inactive Users Regularly

When a team member leaves your organisation, remove their access immediately. Go to Settings → Team Members, review the list of active users, and remove any who should no longer have access.
4

Use Strong, Unique Passwords

Use a unique password for your Unecast account - one that is not shared with any other service. A password manager makes this easy to maintain across your whole team.

​
Data Retention and Deletion

Unecast gives you control over the data you hold, so you can respond confidently to customer data requests and manage your own data lifecycle.
  • Customer data retention - Data is retained as configured in your account settings for as long as your subscription is active.
  • Individual contact deletion - You can delete any contact and all associated conversation data at any time. Go to the contact’s profile and select Delete Contact. Deletion is immediate and permanent.
  • Account cancellation - When your Unecast subscription ends, all data associated with your account is deleted from our servers in accordance with Unecast’s data retention policy. You will not retain access to any stored conversations or contacts after the contract term expires.
If you need to fulfil a customer’s right-to-erasure request under GDPR Article 17, you can delete their contact record and all associated data directly from the Unecast inbox - no support ticket required.

​
Frequently Asked Questions

All Unecast customer data is stored on AWS (Amazon Web Services) infrastructure hosted at multiple geographical locations around the world to give you the highest accessibility, speed and reliability no matter where you are.
No. Unecast never uses your conversation data, contact data, or any other customer information to train AI models - whether Unecast’s own models or those of any third-party provider. Your data is used solely to provide the service you have contracted for.
Unecast operates a responsible incident management security optimization program. If you discover a potential security vulnerability in any Unecast product or service, please email security@unecast.com with a detailed description of the issue. Unecast’s security team will acknowledge your report within 48 hours and work with you on a coordinated response.
Unecast is an official Meta Business Partner (Meta Tech Provider), granting verified access to the WhatsApp Business API.
After your contract term ends, Unecast removes your account data from its servers in accordance with its data retention policy. You will lose access to the platform and all stored data - including conversation histories and contact records - once the contract expires. We recommend exporting any data you need to retain before cancelling.