Nitka works with your customers' conversations and access to ad accounts, so data protection is part of the product. Here is how we do it.

In brief

Official Meta APIs only. No Facebook or Instagram passwords: you grant access in the Meta dialog and can revoke it there.

Minimum permissions. We request only the permissions without which chats and event sending do not work.

We do not sell or share data with third parties for their own purposes.

Deletion on request — by email to info@nitka.tools, within 30 business days (nitka.tools/user-data-deletion/).

Technical measures

MeasureImplementation
Encryption in transitHTTPS, TLS 1.2+ for the website, dashboard and requests to Meta
Token storageMeta access tokens are stored encrypted [AES-256 — confirm with the developer]
PasswordsHashed [bcrypt / argon2 — confirm], never stored in plain text
Data isolationEach account's data is logically separated; one user cannot see another user's data
HostingSecure cloud infrastructure with encryption at rest and access control
Backups[Daily — confirm], copies retained for up to 30 days
Team accessCore developers only, with two-factor authentication; we access conversations only at your support request
PaymentsCard data is processed by WayForPay; Nitka never sees or stores it

Our recommendations

Enable two-factor authentication in Facebook, Instagram and Meta Business Suite.

Give access to the Nitka dashboard only to employees who need it, and revoke it when they leave.

We never ask for passwords or SMS codes. If you receive such a request "from Nitka", forward it to info@nitka.tools.

Incidents and vulnerabilities

If an incident affecting your data occurs, we will notify you by email within 72 hours of discovery and explain what happened and what we are doing. Found a vulnerability? Write to info@nitka.tools with the subject "Security"; we will respond within 3 business days.

Documents

Privacy Policy — nitka.tools/privacy-policy/

Public Offer — nitka.tools/terms-and-conditions/

User Data Deletion — nitka.tools/user-data-deletion/

Cookie Policy — nitka.tools/cookies/