How WFCC protects your data

Access by role and team

What a person can open is decided by their role and their team. Managers see the records of the people who accepted them as a manager, not the whole company. Only a super admin sees everything. See Roles and what each sees.

Passwords

• Passwords are stored only as Argon2id hashes, never as text.
• A password has at least 8 characters.
• When an administrator sets a password for someone, WFCC asks that person to change it before they can continue.
• A manager can create a one-time reset link for someone in a lower role.

Connections and sessions

• The app talks to the server over HTTPS. Calls use an encrypted connection to the call server.
• In the browser, your session is kept in a secure cookie that page scripts cannot read. In the Android and Windows apps, it is kept in the device’s secure storage.

Hidden section

Contacts and chats can be hidden behind a PIN. The server stores the PIN only as an Argon2 hash. A recovery code resets access if the PIN is forgotten. See Contacts and hidden chats.

Audit log

Changes and sign-in events are recorded in the audit log, so you can see who changed what and when.

Your own data

In your profile:

• Download my data — a JSON copy of your profile, contacts and location history.
• Delete my account — removes your name, phone and email and signs you out. Messages and files you already shared may stay visible to colleagues.

Privacy policy

Read the full privacy policy.