The sender, subject, and body of every email — plus any attachments — are encrypted with AES-256-GCM before they're ever written to our database, each with its own random nonce. If someone got a copy of the database itself, that content is ciphertext, not readable text. Only non-content metadata needed to run your inbox — read/unread status, star/archive flags, and timestamps — is kept in the clear.

Your account password is hashed with Argon2id — the memory-hard, GPU-resistant hashing algorithm recommended by OWASP — never stored, never logged, never recoverable by us. Forgot it? You can reset it any time from the sign-in page; we never see the new one in plain text either.

All traffic to and from Witty Notify — the portal, the API, and mail delivery — runs over TLS. Outbound replies sent through your own connected mailbox use your provider's own encrypted SMTP connection, with their DKIM/SPF/DMARC intact.

We're transparent about this: messages sent through the WhatsApp Business Cloud API — which is how any business tool, including ours, talks to WhatsApp — are not the same end-to-end encrypted channel as a personal WhatsApp chat between two people. Meta's infrastructure carries those messages. We minimize what we ever put in a WhatsApp message — previews are short, and full email bodies stay in your encrypted inbox rather than being pasted in full into chat history.

We're honest about this: your email is stored, encrypted, for as long as your account exists — that's what lets the inbox, search, and threading actually work, not just a one-time relay. We don't mine it, sell it, or share it with third parties. Archiving or deleting an email in the app flags it as such immediately. Deleting your account permanently erases your stored emails, attachments, and account data outright — that's a real, irreversible deletion, not a soft flag.