Skip to content
WayCRM

Security

Each person sees only what they should.

Your pipeline is your business. Control access by role and feature, keep each salesperson's data separate and track every change to a lead.

Roles and custom roles

Start with admin and staff roles, then create custom roles that match how your team is organised.

Per-feature permissions

Grant View, Add, Edit and Delete separately for leads, contacts, lead campaigns, templates, bots and custom emails.

Row-level data isolation

Staff see only the leads, conversations and records assigned to them. Admins see the full picture.

Hashed sessions, encrypted tokens

Sign-in uses session-based login with hashed tokens. Tokens for connected integrations are stored encrypted.

Separate businesses

Multi-business support keeps each business's data apart, with a switcher for people who work across several. Agency accounts are supported.

Activity log

Every change to a lead is recorded in its activity log, so you can see who changed what and when.

Permission grid

Decide exactly who can do what.

Admins set permissions per feature for every custom role. Combined with row-level isolation, a salesperson can work their own leads without seeing — or changing — anyone else's.

  • Conversations follow lead ownership in the WhatsApp inbox
  • Lead transfer moves leads, payments and meetings when someone leaves
  • Connect WhatsApp through Meta's official Embedded Signup

Report a security issue

If you believe you have found a security vulnerability, please email contact@magicbolt.ai. [Add your responsible-disclosure policy and data hosting details here.]

Ready when you are

Have security questions?

Book a call and we'll walk your team through access control and data handling.

  • Official Meta WhatsApp Cloud API
  • Guided number setup
  • Web CRM + Android app