Security and trust
Your number. Your data. Your exit.
The questions owners ask before they sign, answered plainly, and how your guests' data is kept safe.
Six things owners want to know
Who owns the WhatsApp number?
You do. Innkraft connects through the official WhatsApp Business Platform, and your hotel's credentials are stored encrypted, per hotel.
What does Meta charge?
Meta sets its own messaging rates for the WhatsApp Business Platform. We lay out what applies to you when we quote, so there are no surprises.
Do you take commission?
No. Innkraft charges a plan fee and nothing per booking. Your guests book with you, not through us.
What about customisation?
Anything beyond the standard setup is scoped and quoted in writing before work begins.
Who pays for the AI?
The AI model is managed by Innkraft. You do not need to bring an AI key.
Can I leave and take my data?
Leads and conversations can be exported by the roles you allow, and your guest data stays yours. Exit and migration terms are written into your agreement.
Controls that protect guests
- Role based access. Five roles with clear limits. Settings, exports and team management are permission controlled for each hotel.
- Guest contact masking. Phone numbers and emails can be masked by role. Revealing one is a deliberate action, and it is logged.
- An audit trail. Staff actions are logged, and each lead keeps a history of every status change with who made it.
- Account controls. An Owner can suspend a member. People can deactivate their own account, which can be restored.
- Encrypted hotel credentials. WhatsApp and booking engine secrets are stored encrypted, per hotel.
- Monitored email delivery. The system that emails your front desk is checked every few minutes, so a broken credential is caught quickly.
An honest status table
| Item | Status | Note |
|---|---|---|
| Official WhatsApp Business Platform | Live | Messages are sent through Meta's own API. |
| Role based access and masking | Live | Per hotel, by role. |
| Audit log of staff actions | Live | Includes lead status history. |
| India DPDP Act and GDPR | Built in | The platform is built with both in mind. Ask us for our compliance register. |
| Independent certifications such as SOC 2 or ISO 27001 | Not claimed | We do not claim any certification we do not hold. |
