Security

Last updated: 2026-08-26

We take the security of your business data and your customers’ feedback seriously. We use strong technical and organisational measures to protect the information stored and processed on Talk2UsNow. No internet-based service can guarantee absolute security or uninterrupted availability, but we work continuously to keep the platform secure and reliable.

1. Encryption

  • All traffic between your browser and Talk2UsNow is encrypted in transit with HTTPS/TLS.
  • Data stored in our database is encrypted at rest by our infrastructure provider.

2. Business data isolation

Talk2UsNow is multi-tenant by design: every business operates in its own account. Access to business data is restricted to the relevant business account. Isolation is enforced at two levels: in our application logic (every request is scoped to the signed-in owner) and by database row-level security. These controls are designed to prevent one business from accessing another business’s data.

3. Authentication & access control

  • Passwords are handled by our authentication provider; Talk2UsNow does not store your password directly.
  • Access is authorised with short-lived, signed session tokens issued and validated through that provider, and checked on every request.
  • Access to our internal admin console is limited to an explicit allow-list of accounts and can be further restricted by network (IP) rules.

4. Application security

  • All database access uses parameterised queries, which guard against SQL injection.
  • Inputs are validated and outputs are encoded, applying controls designed to reduce common injection risks such as cross-site scripting.
  • Hardening response headers are configured to reduce clickjacking, content-type sniffing, and other common browser-side risks.
  • Request size limits and rate limiting help protect against spam and automated abuse.

5. Payment security

Talk2UsNow does not store customers’ payment card numbers. Subscription billing is processed by our third-party payment provider, which handles card details under its own security and compliance obligations.

6. Data minimisation

We collect and keep only the information the service needs. In the dashboard, business owners see customer phone numbers in a masked form. Depending on how a business configures its feedback flow, customer-submitted information may include a rating, an optional name, a phone number, and the feedback message.

7. Customer feedback protection

Private feedback is intended only for the business that collected it, and Talk2UsNow does not make it public. If a customer chooses a public-review flow, such as being redirected to Google, that happens on the third-party platform under its own terms. We do not control the privacy or security practices of those external platforms.

8. Third-party providers

We rely on carefully selected providers for parts of our infrastructure, such as database hosting, authentication, email delivery, and billing. These providers may process information on our behalf under their own security and privacy obligations. See our Privacy Policy for the current list. Within Talk2UsNow, access to customer information is limited to authorised personnel who need it to operate, maintain, secure, or support the service.

9. Business & account responsibilities

Security is a shared responsibility. Businesses are responsible for keeping their account credentials confidential, managing who has access, and using Talk2UsNow in line with applicable laws. Please collect only the customer information you have a legitimate reason to collect, and do not request sensitive information through the feedback form unless you have appropriate safeguards in place.

10. Sensitive information

Talk2UsNow is not designed to collect or store sensitive categories of personal information, including health or medical information, unless expressly agreed in writing and supported by appropriate safeguards. Businesses are responsible for configuring their feedback forms accordingly and for not requesting such information without those safeguards in place.

11. Security incidents

If we become aware of a security incident affecting personal information or the service, we will assess it and take appropriate steps to contain, investigate, and remediate it. Where notification is required by applicable law, we will notify the affected parties and relevant authorities.

12. Responsible disclosure

If you believe you have found a security issue, please email hello@talk2usnow.com with enough detail for us to reproduce it. We are grateful for reports made in good faith and ask that researchers avoid accessing, changing, or deleting data that is not their own.

13. Continuous improvement

Security is an ongoing process. We periodically review our infrastructure, application controls, and operational practices, and improve them as Talk2UsNow evolves. Questions? Email hello@talk2usnow.com.