Security
Wishly holds the knowledge that runs your business online. Here's exactly how we protect it.
Encrypted everywhere
Traffic is served over HTTPS and your data is encrypted at rest by our cloud provider.
Access rules in the database
Every table enforces row-level rules, so one account can never read another account's projects, Brains, conversations or leads — even if the interface is bypassed.
Isolated AI Brains
Each Brain only answers from the knowledge added to that project. Knowledge is never pooled between businesses or used to train shared models.
Secure sign-in
Sign in with email and password or Google. Sessions are managed by our authentication provider and passwords are never stored by Wishly.
Reporting a problem
If you believe you've found a vulnerability, email security@wishly.website with the details. We investigate every report and will keep you updated.