Short version: we hold the text of conversations your own connected channels already received, we use it to produce your reports, and we do not sell, share or train on it. Everyone who processes it for us is named below.
Direction, timestamp, the text, and who sent it: the customer’s phone number or account id, and the name shown on a public comment. This is what the report is computed from.
A copy of each event Meta sends to our server, exactly as sent. Today it is not linked to a workspace and is not deleted automatically. We delete matching events by hand on request.
Business name, locations, staffed hours, your email and a hashed password. Passwords are stored as bcrypt hashes and cannot be read back, by us or anyone.
No card details: payments run through Stripe and the card never touches our servers. No customer profiles, no address books, no contact exports.
DigitalOcean: a managed PostgreSQL database in Singapore, with the application on a single server in the same region. A workspace’s messages and reports are read by tenant id on every query, and that scoping has its own automated test.
| Service | What it receives | Why |
|---|---|---|
| Meta (WhatsApp Business Platform, Facebook, Instagram) | Delivers your conversations to us | The connection itself. Ardito is a verified Meta Tech Provider. |
| DigitalOcean | Everything we store | Our application server and managed PostgreSQL database, in Singapore. |
| Anthropic (Claude) | The text of an answered conversation. The customer’s phone number or account id is not attached; anything written inside a message is sent as written. | Reply-quality grading, on the Coach plan only. Not used for training. |
| Cloudflare | Our outgoing email, including the weekly summary, which can quote the first 90 characters of unanswered customer messages. Also email sent to hello@arditohq.com. | Cloudflare Email Sending and Email Routing. |
| Stripe | Your billing details | Subscriptions. Card data never reaches us. |
| Messages sent through our contact form, forwarded to our Gmail inbox. Your IP address when a public page loads its fonts. | Gmail and Google Fonts. |
That is the complete list. If it ever grows, this page changes before the feature ships.
Pressing Disconnect on the Connect page tells Meta to stop sending that account’s events. A Page and its linked Instagram account share one subscription, so Meta keeps sending until neither is connected; Ardito stops recording the one you disconnected. Disconnecting WhatsApp is by email to hello@arditohq.com for now.
Email hello@arditohq.com from your account’s email address, as the data deletion page explains. We delete the workspace, its conversations, its reports and the matching raw events by hand within 30 days. It is not self-serve yet, and database backups expire on DigitalOcean’s own schedule.
Conversation text goes to Anthropic only for workspaces on the Coach plan. There is no per-workspace switch yet. The weekly summary email can quote unanswered messages on any plan.
Logging out removes the session from your browser. Resetting your password signs out every other session at once.
The audit is free and reads the last 180 days of your enquiries. If nothing is being missed, you will know that too.
Run your free Missed-Lead Audit