Security
Security and privacy are built into how we design, build, and operate VartaBot. This page summarises the measures we take to protect your data.
Last updated: July 2026
Encryption
All traffic between you, your visitors, and VartaBot is encrypted in transit using TLS/SSL. Sensitive data is encrypted at rest. We avoid storing data we do not need.
Access control
We enforce role-based access and least-privilege internal access, so staff can only reach what their job requires. Administrative access is limited, logged, and reviewed.
Tenant isolation
VartaBot is multi-tenant by design. Each customer workspace is logically isolated so that one customer cannot access another customer data.
Infrastructure and availability
We run on reputable cloud providers with monitoring, automated backups, and redundancy. We aim for high availability and publish live system health on our Status page.
Secure development
Security is part of our development process. We keep dependencies up to date, follow secure-coding practices, and keep secrets such as API keys on the server, never in the browser.
Incident response
We monitor for security events and maintain an incident-response process. If a breach affecting your personal data occurs, we will notify affected customers and the relevant authorities as required by law and without undue delay.
Responsible disclosure
We welcome reports from security researchers. If you believe you have found a vulnerability, email security@vartabot.in with the details and we will acknowledge and respond promptly. Please give us reasonable time to fix issues before any public disclosure.
Shared responsibility
We secure the platform; you help by using a strong, unique password, controlling who has access to your workspace, and configuring your chatbots to collect only the data you need.
Questions about this document? Email legal@vartabot.in.