Security that does not get in the way.

The Centre is where your plans, texts and access to company social media accounts live. That is why we designed its security the way online banking works: a password plus a code from your phone, short sessions, a history of every change and the rule that nothing goes out without a human decision.

Signing in: a password and a code from an app

Every account signs in in two steps. First the password — at least 12 characters, ideally a few words you do not use anywhere else. Then 6 digits from an authenticator app (Google Authenticator, Microsoft Authenticator or a password manager that shows codes). The code changes every 30 seconds.

When you create your account you also get backup codes — they stand in for your phone if you lose it. Each code works once, and the screen shows them only once.

example

Protection against password guessing

• After several failed attempts the account is locked for a short while.
• When many failed attempts come from a single address, the Centre stops accepting sign-ins from it.
• We do not store passwords as they are — only in a form that cannot be turned back into the password, even by someone holding the database.
• Forms accept only requests sent from this site (protection against other sites impersonating it).

Sessions and devices

A normal session ends after 2 hours of inactivity, and after 12 hours at the latest. On your own phone or computer you can tick “Keep me signed in on this device” — on someone else’s computer, leave that box empty.

The “Notifications and devices” screen lists your signed-in devices. The “Sign out all other devices” button ends sessions everywhere except the one you are using. Changing your password or authenticator app also signs out the other devices.

Nothing publishes itself

A post goes out to Facebook or Instagram only after a human approves it — the person you name for the brand. Approval covers exactly that content: if anyone changes even one word, the post goes back for approval. Approval is only possible when signed in with a password and code — never by email or messaging app.

Change history and archive

Every important action goes into the change history: who, what and when — sign-in, approval, content change, publication, package change. The history cannot be edited or deleted from within the app.

A copy of every published piece of content is saved in the brand’s archive — together with the date and the post’s address. It comes in handy when a client or an authority asks what exactly went out and when.

Comments and health data

The Centre reads comments under published posts, but does not record who wrote them — you will see the name on the platform. The text of a comment disappears from the Centre after 90 days; only its type (question, complaint, praise) remains. A comment in which someone writes about their health is hidden — you reveal it only on your own screen, and the assistant will not repeat that data in a reply.

Where the data is

The Centre runs on a server in the European Union, and the connection to it is always encrypted. Access to company accounts is stored encrypted, separately from the rest of the data, and backups are made daily — also encrypted and kept off the server.

External services receive only what is needed at that moment: the text of a draft for the AI assistant, a product photo for the image generator (when the brand has that add-on and someone orders an image), a finished post for Facebook or Instagram. The full list of entities that process data, and the legal bases, is in the privacy policy.

When we run a client’s brand in the Centre, we process data on your behalf (data processing under Article 28 GDPR) — the rules are set out in the terms of service and the privacy policy.