How MooseChat protects your visitors' conversations and your account.

Your visitors' data

Conversations, their summaries and lead details are encrypted at rest with a key that belongs to your workspace alone. A lead's name, email and phone are also kept unencrypted so you can search your inbox.

Visitor IDs and IP addresses are stored only as salted hashes.

Conversations are deleted after 12 months. Deleting a bot removes its pages, its search index and its conversations within 24 hours. Leads stay until you delete them.

The gateway we send AI requests through keeps no log of them, so a conversation's text is stored only in its encrypted transcript.

Your account

Sign-in is rate limited, sessions use secure cookies, and every request is checked for cross-site forgery.

API keys are stored hashed and shown once. A key can't manage members, billing or other keys, and can't delete a workspace. Those need a person signed in to the dashboard.

We keep an audit log of changes to members, keys, bots, lead destinations and plans.

Infrastructure

MooseChat runs on Cloudflare. Limits per visitor and per IP stop anyone from running up your usage, and a sudden burst of new chats brings up a bot check until it passes.

In September 2026 we reviewed the whole codebase for security issues and fixed everything we found.

Reporting a problem

If you find a vulnerability, email support@getmoosechat.com. Our contact details are also in security.txt.

How we handle personal data, and who processes it for us, is in the privacy policy.