This is a summary of what protects your workspace, written for a customer deciding whether to trust WTS CRM with client data. The privacy policy remains the full, legally binding account of what we hold and why — this page exists so you do not have to read that one to find the security parts.
How your data is protected
- Traffic is encrypted in transit, and the database and file storage are encrypted at rest.
- Your workspace is isolated from every other customer’s at the database level, by row-level security keyed to your account — not merely by what the app chooses to show you. A bug in the interface cannot leak one workspace into another.
- If you save a payment gateway credential (for example, a Razorpay key) so WTS CRM can collect your invoices, that secret is kept write-only: it can be replaced, but it is never readable back out through the app, even by someone holding a valid session.
- Passwords are stored only as hashes. We never see yours, and we will never ask for it.
- Access to production systems is limited to the people who need it, and requests are logged.
No system is perfectly secure, and we will not claim otherwise. These are the safeguards in place today; they change as the product does, and this page is updated when they do.
Reporting a vulnerability
If you believe you have found a security weakness, tell us before telling anyone else, at the address on the contact page. We will not pursue anyone who reports a genuine issue in good faith and does not exploit it, and we will acknowledge a report within 48 hours.
If something goes wrong
If personal data we hold is lost, exposed or accessed without authorisation, we notify the Data Protection Board of India and every affected person without delay, as the DPDP Act requires, saying plainly what happened and what to do — not a euphemism about an incident. The full commitment is in the privacy policy’s “If there is a breach” section.
Who else touches your data
We keep the number of processors small, and each is bound to hold data only to run the service. The current list, and where each one is located, is in the privacy policy’s “Where your data lives” section — we do not duplicate it here so it cannot drift out of date in two places.