Ragbee Ragbee
Support Open dashboard
User Manual
⭐ Tutorials API & Billing Discord Bot Documents & Data Getting Started Facebook Messenger Chatbot Security & Policies Telegram Chatbot Voice Line Website Widget Zoom Chat
Security & Policies

Security & Policies

How Ragbee protects data, and the channel trust policy that decides what answers where.

Data isolation

  • Every organization is a tenant with its own documents, workspaces, chatbots, and logs. Retrieval is workspace-scoped: a bot only ever answers from the workspace it's pointed at
  • Documents, chunks, and conversations are stored per tenant with no cross-tenant retrieval

Encrypted credentials

Bot tokens and platform credentials (Telegram bot tokens, Messenger Page tokens and app secrets, Zoom tokens) are stored encrypted at rest. Plaintext credentials never appear in logs or dashboard pages.

Channel trust policy

Not all channels get all answers. Public and semi-public channels are knowledge-only; personal data requires verified identity:

  • Website widget, Messenger, Telegram, Discord, email bots — document/knowledge questions only. Personal or account-specific questions get a friendly pointer to your official channels
  • Dashboard chat — requires login; sensitive data additionally requires an in-session verification dialog
  • Voice line — identity verification (per-tenant fields like employee ID + DOB/PIN) before any personal answer

This is enforced in the platform, not left to prompts.

PII handling

  • Sensitive patterns are masked before text reaches model prompts and scrubbed from replies
  • Personal data never crosses public chat channels by design (see above)
  • Transcripts and events are logged per tenant for audit, with retention purging available

Webhooks & integrations

  • Platform webhooks are signature-verified (Meta's X-Hub-Signature-256, Telegram secret headers, Zoom HMAC) — unsigned or wrongly-signed events are rejected
  • Webhook URLs use unguessable per-integration keys
  • Bring-your-own-app credentials (e.g. your own Meta app secret) are per-tenant and encrypted

Data deletion & privacy

  • Account personal data and chat history are deleted or de-identified within 30 days of removal — see the Privacy Policy
  • Administrators can request full tenant deletion (documents, logs, everything) at support@ragbee.ai

Questions or a security review for your organization? Contact support.