Message bodies on WhatsApp and website chat are stored AES-256-GCM encrypted at rest, and never as plaintext.

Who can read a transcript

Members of the workspace read decrypted text in Conversations. Kylo decrypts a body only when a signed-in member of the owning workspace opens the thread, and the encrypted value never reaches the browser. Another workspace cannot see the thread.

What is stored

The agent also keeps your customers’ WhatsApp history in WhatsApp itself. The customer’s own phone remains a readable record that Kylo does not control.

Exports

Export as JSON and Export as CSV contain metadata only: ids, channel, contact label, message kind and label, timestamps, delivery status, and delivery error. They never contain message text.

Delete

Deleting a conversation removes its message rows and, best effort, the agent’s memory of the thread. The contact can message again and start a new thread.

Conversations

The inbox.