At magenCRM, we understand the importance of keeping your personal and organizational data safe. That’s why we use industry-standard security technologies and best practices to protect the information of synagogues and Jewish congregations around the world.
Data Encryption & Secure Access
All communication with magenCRM is encrypted using HTTPS with TLS (Transport Layer Security), commonly known as SSL. This ensures that sensitive data like passwords and account details are transmitted securely and are only accessible to authorized users in your organization.
Each user logs in with a unique username and password, and all login data is securely hashed using PBKDF2. All sensitive customer data is encrypted at rest, using Amazon RDS Encryption, which protects the underlying storage, backups, and replicas.
Infrastructure and Hosting
magenCRM is hosted on HOSTINGER, a globally trusted and secure infrastructure provider. Data centers are equipped with strict physical security measures.
Payment Information
We do not store credit card or payment data on our servers. All payments are securely processed through Stripe, which uses tokenization to protect card information. Stripe is PCI DSS certified, ensuring the highest standards in payment security.
WhatsApp and Email Integrations
When sending automated messages via WhatsApp or Email, we use secure, verified connections through trusted providers like Twilio and SendGrid. Email domains and WhatsApp numbers must be verified and authorized by the customer to ensure authenticity and prevent abuse.
Access Control
Only authorized magenCRM personnel can access production servers. Access to customer data is strictly limited and protected by multi-factor authentication (MFA). All access to your organization’s data is logged and monitored.
Data Monitoring and Incident Response
Our systems are continuously monitored for unusual activity, including spikes in usage, error rates, and security alerts. We maintain up-to-date software dependencies and apply regular security updates and patches.
Data Retention and Deletion
Customer data is retained only as long as necessary for service provision and legal compliance. If a customer terminates their account, data is retained for up to one year, after which it is deleted unless otherwise requested.
FAQ – Security at magenCRM
Do you store credit card information?
No. All payments are handled by Stripe. We never store sensitive payment details.
Is the platform secure?
Yes. All communications are encrypted (HTTPS). Data is stored securely on AWS infrastructure with encryption at rest and in transit.
How do you protect login information?
Passwords are hashed with PBKDF2, and we use HTTPS and MFA where applicable.
Can I send messages from my own email or WhatsApp account?
Yes, but your accounts must be verified and connected first. We provide easy setup guides to help you do that securely.
What happens if I cancel my account?
We retain your data for up to one year in case you wish to return. After that, your data is securely deleted unless required for legal compliance.