Encryption
- All traffic to InfinityRelay and this website uses HTTPS (TLS encryption in transit).
- Access tokens for connected Facebook, Instagram, WhatsApp and ad accounts are stored encrypted.
Access control
- Role-based access: Super Admin, Brand Admin and Agent.
- Per-module permissions (website chat, social inbox, comments, leads, calls), so people only see what they need.
- Brands are kept separate: team members only see the brands they're assigned to.
Audit logging
- Important actions are recorded in an audit log.
- Spending actions — creating, starting, changing or pausing campaigns and changing limits — are always logged.
Backups
- Data is backed up regularly, and backups are rotated on a fixed schedule.
Built-in safeguards
- Ad campaigns are created paused; daily and monthly spending limits pause campaigns automatically.
- Do-not-call lists are checked before every call.
- Complaints in comments are never answered automatically.
- Businesses can disconnect social accounts at any time, which removes the stored access token.
Report a security issue
If you believe you've found a security issue, email support@infinityrelay.com with the subject "Security report". Please give us reasonable time to fix it before sharing it publicly, and don't access or change data that isn't yours.