Security

Security program

Rootel maintains a security program focused on protecting customer workspaces, communication data, integration credentials, and platform infrastructure. Security controls are reviewed as the product and threat environment evolve.

Access controls

• Administrative access is limited to authorized personnel with a business need.
• Production access follows least-privilege practices and is reviewed periodiconversationy.
• Customer workspaces are permissioned so authorized team members can access only the resources assigned to them.
• Sensitive operational access is logged where technically supported.

Data protection

• Rootel uses encrypted HTTPS connections for web traffic and API communication where supported.
• Integration credentials and tokens are handled as sensitive secrets and are not exposed in normal user interfaces.
• Data stores, backups, and infrastructure are managed with provider-level security controls and restricted access.
• Retention and deletion processes are designed to remove or anonymize eligible data when it is no longer needed.

Application security

• Rootel applies secure development practices such as code review, dependency awareness, input validation, and controlled release workflows.
• Authentication, authorization, and tenant separation are treated as core application concerns.
• External integrations are scoped to the permissions required for the enabled workflow.
• Security-relevant errors and abnormal behavior are monitored to support investigation and response.

Meta and messaging integrations

• Rootel requests Meta permissions only for customer-enabled use cases.
• Meta tokens and webhook data are used to operate connected messaging, inbox, automation, and analytics workflows.
• Customers can disconnect integrations, and users can submit deletion requests through the Data Deletion page.
• Rootel does not sell Meta platform data or use it to build unrelated advertising profiles.

Incident response

Rootel investigates suspected security incidents, takes containment and remediation steps based on severity, and notifies affected customers or regulators when required by applicable law or contract.

Responsible disclosure

If you believe you have found a security issue in Rootel, contact security@rootel.ai with a detailed report, affected URLs or endpoints, reproduction steps, and your contact information. Please do not access, modify, destroy, or disclose data that does not belong to you.

Customer responsibilities

• Use strong passwords and protect login credentials.
• Limit workspace access to current authorized users.
• Review connected integrations and permissions regularly.
• Configure digital employee, knowledge sources, and handoff rules according to your legal and business requirements.
• Notify Rootel promptly if you suspect unauthorized access to your account or workspace.

Contact

For security questions, contact 3not robotics private limited at security@rootel.ai.