Getting started·Beginner3 min read

Is my customer data safe?

Plain-English guide to workspace isolation, private files, staff-access controls, export and deletion, plus the current evidence limits published on the Trust page.

In this guide

The short version
Your data is private to you
Infrastructure evidence
You own it, and you can take it or delete it
Yesoma staff cannot snoop
Lock down your own account
What we don't do
See also

Putting your customers' messages into any tool is a real decision, and you deserve a straight answer about what happens to that data. This is the plain-English version. (If you need the formal, detailed write-up for a procurement or compliance review, that lives on the Trust page.)

The short version

Yesoma applies workspace isolation, private-file access controls, role checks, and an explicit staff-support access flow. We do not sell Customer Content. Infrastructure and recovery evidence that is still being verified is identified on the Trust page rather than presented here as complete.

Your data is private to you

Every workspace is isolated at the database level. There is no screen, search, or report in Yesoma where one business can see another business's customers or messages. Your data is yours alone.

Infrastructure evidence

Files you and your customers upload use private storage and short-lived signed links. Current evidence for database transport enforcement, provider backups, recovery coverage, and production-console controls is published on the Trust page. Treat an item marked pending there as an open operational gate.

You own it, and you can take it or delete it

Export: you can download your workspace's data whenever you want.
Delete: you can permanently delete your workspace and its data, with a grace period to undo. Individual customers can also request that their data be exported or erased, and you can action that.

See Customer Hub: documents and privacy and Delete your workspace.

Yesoma staff cannot snoop

Yesoma's own team cannot open your workspace by default. If you ever need hands-on help, you turn on staff access yourself, every visit is logged for you to see, and access is read-only unless you grant more. You are in control of who sees your data and when. See Staff access and impersonation.

Lock down your own account

The strongest link in the chain is your login. Turn on two-factor authentication so a stolen password alone can't get in, and require it for your team if you have one. See Two-factor authentication.

What we don't do

We do not sell your data, and we do not share your customers' information with other businesses or advertisers. Yesoma makes money from subscriptions, not from your data.