User security
EasyChat stores customer conversations on your website, so safety starts with careful operator and administrator habits.
What Must Not Be Published
- Passwords and one-time codes.
- QR codes for app login.
- External service keys and license keys.
- Payment data.
- Private customer messages.
- Screenshots that show private data.
Operators
- Create a separate account for every operator.
- Remove access when an employee no longer works with chats.
- Do not use one shared login for the whole team.
- Do not send internal notes or service messages to customers.
Phones And QR Login
- Connect the Android app only on active operators’ phones.
- Do not send login QR codes through messengers or public chats.
- If a phone is lost or passed to another person, remove its session in the EasyChat admin panel.
- After changing phones, create a new QR code.
Passwordless Login
If the device supports Face ID, fingerprint or PIN login, EasyChat can offer to link it after normal password login. Biometrics stay on the device: EasyChat does not receive a face scan, fingerprint or PIN.
The password remains the fallback login method.
In the buyer cabinet, the order email is never a sign-in or recovery method.
Store the EasyChat ID and recovery codes, add a passkey, and end other sessions
from Sign-in & security when needed. Confirm a one-time connection after
payment or from the installed module only on easychat24.ru.
Sensitive cabinet settings ask for the current password again when more than
15 minutes have passed since the last confirmation.
Domain And Blocking
If a domain is blocked in the cabinet or admin panel, operators should not be able to log in to EasyChat, and already connected apps should stop working with that domain.
After the block is removed, the operator logs in again with a current QR code or link.
Files
- Allow file uploads only where they are really needed.
- Do not open suspicious attachments.
- Do not accidentally send internal documents to customers.
- If EasyChat rejects a file, do not try to bypass the restriction.
Analytics On The EasyChat Website
On easychat24.ru, Yandex Metrica analytics is enabled only after you select
Accept all in the cookie notice. If you select Required only or make no
choice, the browser does not load the Yandex counter. This choice applies to
the public EasyChat website and does not enable analytics in your installed
EasyChat module.
After consent, the website may store UTM tags, yclid, a technical Metrica ID,
visited pages and irreversible IP/User-Agent fingerprints. If the user
voluntarily enters the short setup code, the journey gains technical product
stages only: download, verified installation, Android connection, successful
conversation sync to the phone, use after seven days and payment.
Conversations, attachments, customer contacts, shop products and orders are never sent to this analytics system. The Android confirmation contains only a random push signal ID and is sent after messages have been loaded successfully from your server.
If the choice changes from Accept all to Required only, the website removes the analytics cookie, erases advertising identifiers and EasyChat ID/installation links, deletes Metrica goals that have not been sent yet, and keeps existing counters only in anonymous aggregate form.
Enquiry On The EasyChat Website
The enquiry form on easychat24.ru is only for discussing platform choice,
compatibility, a pilot or partnership. It is not a customer cabinet login and
does not ask for a password, API key, QR code or access to your website.
The enquiry is stored in EasyChat’s protected commercial system. An irreversible technical connection fingerprint is used for spam protection; the raw IP address is not stored in the lead card. Only EasyChat administrators can access the queue.
Support
When contacting support, send only safe details: domain, version, problem description and a screenshot without secrets.
Do not send passwords, keys, payment data, login QR codes or private customer messages.
Checklist
- Every operator has a separate account.
- Unused accounts are disabled.
- Login QR codes are not sent to open chats.
- Lost phones are disconnected in the admin panel.
- The cabinet EasyChat ID and recovery codes are stored safely.
- Secrets and private messages are not sent to support.