Security and data

Your customers’ details, handled carefully

You are handing us names, phone numbers and email addresses. Here is exactly what happens to them, in plain words.

Encrypted on the way

Everything runs over HTTPS. Keys you give us for other services are encrypted before they are stored.

Only what is needed

A first name and a phone number or email is enough to send a request. We do not ask for anything else.

Only your people see it

Roles limit what each person can see. A client login sees 1 client. A member sees their own work.

Not kept forever

Healthcare mode removes old contacts on a schedule you set, and you can ask for everything to be deleted at any time.

What we will not claim

We do not have a SOC 2 report, an ISO certificate or an external audit. Plenty of small software companies put those badges up anyway. When we have them, they will be on this page with a date, and not before.

What we do have

  • HTTPS everywhere, with certificates renewed automatically.
  • Encrypted storage for any keys or passwords you give us for other services.
  • A BAA for healthcare accounts, with care words blocked in messages and detail kept out of the log.
  • Backups of the database, and a log of every message sent.
  • Opt outs that are permanent, and a do not ask list you control.

Your rights

Ask us and you can have a copy of your data, a correction, or the whole account deleted. Write to radhika@totodreammarketing.com. Our privacy policy and terms are at app.fivestariz.com/privacy and /terms.

Questions about data?

Write to us and a person will answer, not a form.