# Customer data protection in Mujib, isolation, encryption and storage

> Customer data protection in Mujib: isolating each business's data, encrypting connection tokens, where data is stored, how long it is kept and who sees it.

Customer data protection in Mujib rests on three things: each business's data is isolated from every other, the tokens that connect WhatsApp, Facebook and Instagram are stored encrypted, and every connection is encrypted over HTTPS. You decide who on your team sees what, and you can download or delete your data when you choose.

Your business owns its customers' data and is responsible for it; Mujib processes it on your behalf and only on your instructions. That is what the [privacy policy](https://app.mujib.ai/privacy) states, and the policy is the authoritative text.

## Is my data and my customers' data safe?

Mujib protects your data with isolation, encryption and team permissions. Even so, no method of transmission or storage is completely secure, as the privacy policy itself says.

| What is protected | How Mujib protects it |
| --- | --- |
| Each business's data | Isolated from other businesses; everything shown or changed is limited to your workspace |
| The WhatsApp session and Facebook and Instagram Page tokens | Stored encrypted with AES-256-GCM |
| The connection between your browser and Mujib | Encrypted over HTTPS |
| Passwords | Never stored as readable text, only as a hash that cannot be read back |
| Signing in to your account | Optional two-step verification with a code sent to your email. See [Two-factor authentication](https://docs.mujib.ai/en/account/two-factor/) |
| Your open sessions | Resetting your password signs out every other session |

Mujib does not sell personal data, and shares it only with the providers needed to run the service, as far as each of them needs to do its job.

## Where is my customers' data stored?

According to the privacy policy, your data is stored on Mujib's servers and database hosted in France, and AI providers in the United States process messages to write replies and to turn voice notes into text.

- **What is processed:** message text, customer identifiers such as phone numbers and account handles, display names, conversation history, photos and voice notes with their transcripts, and your team's account details.
- **Who processes it:** the hosting provider, the AI providers, and Meta for delivering messages on WhatsApp, Messenger and Instagram. The full list of providers and their countries is in the privacy policy.
- **Why:** to write replies, search your knowledge base, organize leads, produce analytics and reports, and run and secure the service.

## Is my data used to train AI?

Mujib does not train an AI model on your conversations. Your agent answers from your knowledge base, your files, your corrections and the conversation itself, all kept in your workspace and never used by another business.

- What you teach the agent through corrections stays in your workspace. See [Correct the agent's answers](https://docs.mujib.ai/en/agent/corrections/).
- A message is sent to an AI provider so it can write the reply, and the privacy policy states that each provider processes data only to perform its function.

## How long does Mujib keep my customers' data?

For as long as your business account is active and the data is needed to provide the service. Conversations are not deleted automatically after a period; you delete what you want, when you want.

- When a business closes its account, or a customer asks for their data to be deleted, the personal data is deleted as described in [Data deletion](https://docs.mujib.ai/en/security/data-deletion/).
- Limited records may be kept where law, security or accounting require it, as the privacy policy says.
- You can download a copy of your data before any deletion. See [Data export](https://docs.mujib.ai/en/account/data-export/).

## Who on my team can reach customer data?

Each account on your team sees only what its permissions allow, and you can limit an account to a single branch.

- You set each account's permissions on the **Team** page. See [Team permissions](https://docs.mujib.ai/en/account/team-permissions/).
- Downloading a full copy of the data with **Export my data** is open to the owner and admins only, because it covers every branch.

![The team grouped by branch, with an account limited to one branch](https://docs.mujib.ai/shots/en/security-team-permissions.webp "Accounts are grouped by branch, so the Abdoun branch manager's account sits under that branch, marked “branch-scoped”.")

## What am I responsible for with my customers' data?

You are responsible for the messages your business sends, and for having a lawful basis and any required consent to message your customers and process their data through Mujib, as the terms of service state.

- Your data and content remain yours, under the [terms of service](https://app.mujib.ai/terms).
- Protect your account by turning on two-step verification, and give each staff member the fewest permissions they need.
- When a customer asks you to delete their data, you can delete it yourself from the dashboard. See [Data deletion](https://docs.mujib.ai/en/security/data-deletion/).
- The channels you connect are also subject to their providers' terms, such as Meta's for WhatsApp, Messenger and Instagram.

## What happens to connection tokens when I disconnect a channel?

Mujib deletes or revokes them: disconnecting a Facebook Page deletes the access token stored for it, and deleting a WhatsApp number unlinks it from **Linked devices** and removes its session.

- Past conversations stay in the inbox after you disconnect, until you delete them.
- To bring a channel back, connect it again. See [Connect WhatsApp](https://docs.mujib.ai/en/start/connect-whatsapp/) and [Connect Instagram and Messenger](https://docs.mujib.ai/en/start/connect-instagram-messenger/).

## Frequently asked questions

### Can another business on Mujib see my customers' data?

No. Each business's data is isolated from the others, and everything Mujib shows or changes is limited to the workspace you are signed in to.

### Does Mujib sell my customers' data?

No. The privacy policy states that Mujib does not sell personal data and shares it only with the providers needed to run the service.

### Are conversations deleted automatically after a while?

No. Conversations stay as long as your business account is active, and you can delete any of them at any time from the dashboard.

### Who is responsible for my customers' data, me or Mujib?

Your business is responsible for its customers' data, and Mujib processes it on your behalf and on your instructions, as the privacy policy says.

### Can I download a copy of my business's data?

Yes. The owner or an admin can download a copy of conversations, customers and settings from the Settings page, with the export button.

---

Source: https://docs.mujib.ai/en/security/data-protection/ · Last updated: 2026-11-04