- zentroStack security
zentroStack Security and Privacy
zentroStack security starts from one fact: you’re trusting us with your customers’ calls, messages and payments. Here’s how we look after them.
Your Data, Protected
Your data stays yours
Every business on zentroStack has its own workspace. Your leads, chats and invoices are isolated at database level, so one business can never see another's data.
You decide who sees what
zentroCRM has detailed role permissions. Give your team access to what they need and nothing more. Remove a user and their access ends straight away.
Payments go through Stripe
Card payments go into your own Stripe account. Card details are handled by Stripe, not stored by zentroStack.
Official channels only
zentroMSG connects to WhatsApp through the official WhatsApp Business Platform, and to Instagram and Messenger through Meta's official tools. No unofficial workarounds that put your number at risk.
AI Rules We Don't Bend
It never pretends to be a person
If a caller asks, zentroVoice says plainly that it is an AI assistant.
No invented answers
It answers only from the information you give it. No invented prices or promises.
You can take over
Switch the AI off for any conversation with one click.
Everything is logged
Chats are saved in your CRM, and calls are logged with the details the AI took, so you can check what happened.
How zentroStack Security Handles Payments
zentroStack never stores card numbers. Card payments are processed by Stripe and paid straight into your own Stripe account, so the money and the card data stay with Stripe and with you.
Backups, Keys and Logins in zentroStack Security
Three parts of zentroStack security work quietly in the background.
Nightly backups. Your workspace data is backed up every night and each backup is kept for 14 days. A second copy is downloaded every day and kept away from the server, so one fault cannot take both.
Keys never shown. The keys and passwords for services you connect, such as WhatsApp or your phone number, are stored on the server. Settings only show that a key is saved, never the key itself, so nobody can copy it from the screen.
Simple, safe logins. You sign in with your email or your Google account. When a free trial ends, nothing is deleted: your leads, clients and history stay in place until you choose a plan or ask us to remove them.
More zentroStack Security Answers
Here are short answers to the zentroStack security questions we hear most.
Does zentroStack record my phone calls?
zentroStack does not keep an audio recording. Each answered call is saved as a written transcript on the lead, so you can read what was said.
Who can read call transcripts and chats?
Only the people you invite to your workspace, and their role decides how much they see. Nobody outside your team can open them.
Where are card details kept?
With Stripe. zentroStack never stores card numbers, and payments go straight into your own Stripe account.
What does the AI do when it is not sure?
It does not guess. It takes the customer’s name, number and question so a person on your team can reply with the right answer.
Can I take my data with me?
Yes. You can export your data at any time, or ask us to delete it. This is part of zentroStack security: your customer list stays yours.
Can I stop team members changing settings?
Yes. A member can work the pipeline without touching settings or integration keys. Only the roles you choose can change how your workspace is set up.
How do I report a security problem?
Message us on WhatsApp or use the contact form. zentroStack is founder-led, so your report goes straight to the person who builds the product.
Is my workspace kept apart from other businesses?
Yes. Each business’s data is kept separate at database level, so one workspace can never see another business’s leads, chats or invoices.
Do I give zentroStack my WhatsApp password?
No. You connect through Meta’s own sign-up steps on the official WhatsApp Business Platform, so zentroStack never sees your WhatsApp login.
Can I see what the AI said to a customer?
Yes. Every chat and every call transcript is saved on the lead, so you can read exactly what the AI said and step in at any time.
Official Channels Keep Your Number Safe
Unofficial WhatsApp tools can get a business number banned. zentroMSG uses Meta’s official WhatsApp Business Platform, connected with Meta’s own sign-up steps, which is a core part of zentroStack security for your customers’ conversations.
Who Can See Your Customers' Messages
Only the people you invite to your workspace can see your leads, chats and invoices, and their role decides how much they see. A member can work the pipeline without touching settings or integration keys, and integration keys are shown masked once they are saved. This is how zentroStack security keeps your customers’ conversations inside your own team.
Every change to a workspace made from the zentroStack admin side is written to an audit log first, so there is always a record of who did what. When a team member leaves, disable their account and their access stops at once, while the leads and conversations they worked on stay safely in your workspace.
Your Data, Your Control
You can export your data or ask us to delete it. Contact us with any question about how your data is handled.
zentroStack Security Questions
Can another business see my data?
No. Each business has its own workspace, and data is isolated at database level, so one zentroStack customer can never see another customer’s leads, chats or invoices.
Does zentroStack store card details?
No. Card payments go through Stripe into your own Stripe account, and card details are handled by Stripe rather than stored by zentroStack.
Are calls recorded?
zentroVoice does not store call audio. It saves the details the AI took, such as the caller’s name, number and what they need, as a lead in your CRM.
How do I remove a team member?
Remove or disable the user in your workspace settings and their access ends straight away. Role permissions control what each person can see before that.
Can I delete my data?
Yes. You can export your data at any time and ask us to delete it. Contact us and we will confirm once it has been removed.