How Avox protects your account, your customers' phone numbers, and your data - and the security settings you control.
Your customers trust you with their phone numbers and conversations, and you trust Avox with the same data. This page explains how that's protected, and the security settings you control yourself in Settings > Security.
Avox is a verified Meta Business Partner. Every WhatsApp connection runs through Meta's official WhatsApp Business Platform.
Everything on this tab is about your own account, so every member can use it, whatever their role.
Changing your password takes three steps on the Password card. The heading above the fields tells you which step you're on, and the main button is always at the bottom right.
Confirm your current password
Type it and click Continue (or press Enter). Avox checks it on its server; if it's wrong you see "That's not your current password". Use the eye button to show or hide what you typed.
Choose a new password
Type your own: a strength bar and a checklist show the rules as you go (8 to 72 characters, an uppercase letter, a lowercase letter, a number, no space at the start or end, and different from your current password). Or click Generate a strong password for a random 20-character password with no look-alike letters, then copy it into your password manager. Type it again in Type it again (a generated password fills this in for you), then click Review.
Confirm and save
Check the summary and click Update password. Back takes you to the previous step.
You see "Your password is updated", you get a Password changed email, and every other device is signed out - they sign in again with the new password. The device you're on stays signed in.
If a password is too common to be safe, you see "That password can't be used - pick a stronger, less common one". An account that only signs in with Google or Facebook has no password to change ("This account signs in with Google or Facebook and has no password to change"). If the change fails for another reason you see AVX-3087. Repeated attempts are slowed down ("Too many attempts - wait a few minutes and try again").
Can't remember your password? Reset it from the sign-in page - see Forgot your password below.
Click Forgot password? under the password field on the sign-in page. It gets easier to spot after a wrong password, or once you've been on the page for a minute. Everything happens inside the sign-in card:
Enter your email
It's filled in from the sign-in form. Click Email me a code.
Enter the 6-digit code
Check your inbox (and spam) for the Password reset code email and type the code into the six boxes - it's checked as soon as the last digit is in. You see the same message whether or not the address has an account, so nobody can use this form to find out who uses Avox. Typed the wrong address? Click Wrong email?. No email after a minute? Click Send a new code (you can ask once a minute).
Confirm it's you (two-factor accounts only)
If you've turned on two-factor authentication, enter the code from your authenticator app before you can choose a new password.
Choose a new password
Type your own - a checklist shows the rules as you go (8 to 72 characters, an uppercase letter, a lowercase letter, a number, no space at the start or end), with a strength bar - or click Generate a strong password and copy it into your password manager. Click Save new password.
You're taken back to the sign-in form with your email filled in and "Password updated", and you sign in with the new password. Every other device is signed out, and you get a Password changed email.
The email also has a Choose a new password link. It does the same as the code, but only in the browser where you clicked Forgot password? - on another device, use the code.
If you can't get the email at all, sign in another way you've set up (a passkey, Google, or Facebook), or email hello@theavoxai.com from your account's email address and the Avox team will help you back in.
The Recent security events card lists your own latest security changes, newest first: password changes, two-factor turned on or off, Switchboards you paused, resumed, deleted, or left, and role or permission changes you made. Only you see your own list. If something there wasn't you, change your password, sign out your other devices, and contact support.
A few actions change something important for the whole Switchboard, so Avox asks the person doing them to confirm with a 6-digit code sent to their own sign-in email address:
Each code:
So even someone using a signed-in browser of yours can't make these changes without also reading your inbox. Deleting a WhatsApp connection uses a code too, sent to the Switchboard's Owner - see Delete.
Avox is a shared platform, but every piece of your data - connections, contacts, conversations, templates, logs - belongs to your Switchboard, and only that Switchboard's members can see it.
Inside your Switchboard, roles and permissions decide who can see and change what. Managers do the day-to-day work by default, while connections, API keys, the team, Switchboard settings and billing start out Admin-only. An Admin can give a Manager individual permissions, or take some away, person by person, and Avox checks every permission on its servers, not only in the dashboard. See Permissions.
Your customers' phone numbers are stored encrypted, not as plain text.
Outbound API keys are shown in full only once, when created. Each key has a name, an optional description and a record of who created it, sends from one connection only, can be limited to a list of IP addresses, and can be revoked instantly. Creating, rotating and revoking a key need an emailed code, and rotating keeps the key's limits, so it's never a way around them. Admins are emailed when a key is created or revoked, used from a new IP address, or blocked by its IP list. See API keys and Authentication.
Repeated guessing or flooding is slowed down and refused. If you see a "too many attempts" or "too many requests" message, wait a minute or two and try again.
Avox staff work in a separate internal dashboard with its own extra sign-in step. Staff actions on customer accounts are recorded, and you're emailed when the Avox team changes something on your account ("Account updated by Avox").
Open Settings > Security and click the Delete account card's button. The Delete account page walks you through four short steps, and Continue deleting is on every one of them:
Tell us why you're leaving
Pick a reason (and add a few words if you like). It helps us improve. Prefer to skip it? Click Go straight to deleting.
See your options
Depending on your reason, you may see an offer, a way to send us feedback, or a quick way to open a support ticket. You never have to take any of them. You also see what's in your account, and Pause your account instead.
Confirm
The page shows exactly what will happen to your account and your Switchboards. Confirm it's you with your password or a 6-digit code we email you, type DELETE, then press and hold the button.
Done
You see a short goodbye, and we email you a confirmation.
What happens depends on your Switchboards:
Payment and invoice records we're required to keep by law are kept separately from your login.
Pause my account pauses every Switchboard you're an Admin of: its WhatsApp numbers and its automations stop, and nothing is deleted. If you pay monthly through PayPal, billing is paused too, so you aren't charged while paused. A plan paid upfront keeps its end date. Come back to the Delete account page and click Resume my account to switch everything back on. If your plan's number limit is reached, any numbers that don't fit stay paused and you can resume them from Connections.
An offer you accept is set aside for your account only and we email you the details. A discount code works once, while you're signed in to this account, until the date shown - Apply to my plan takes you to checkout with the code filled in. If you already pay through PayPal, the code can't be added to that plan; cancel its renewal on Billing and check out again with the code, and the discounted plan replaces the old one straight away. A plan gift has an Accept your gift link. Bonus automation credits are added to your account immediately.
You can delete a Switchboard, your account, or your Facebook-linked data, and track a request from Meta on a public status page. See Data deletion and Compliance.
If you spot something that looks wrong - a sign-in you don't recognise, an email you didn't expect - change your password, sign out your other devices, and email hello@theavoxai.com or open a ticket in Support.
Last updated