Exactly what we can and can't see

The short version

Two separate pieces make up Hire Alien. This website handles your account, your billing, and shows you how many messages your AI employee answered. A desktop app — which you download and run on your own computer — is where your documents live, where your AI provider key is entered, and where every actual conversation happens. Nothing in the second category ever reaches the first.

The exact data flow

Why this is genuinely true, not just a promise

The desktop app is real, runnable software you (or your IT person) can inspect — it's not a black box. When it answers a customer, it reads your local documents directly off your computer's disk, builds the AI's instructions locally, and sends only that single question-and-answer exchange to OpenAI, or a fully local model that never touches the internet at all. Our servers are never in that path — there's no code that routes conversation content through us, because the app was built without that connection existing in the first place.

What this means practically

• If you use a fully local AI model (no internet connection at all), your customer conversations never leave your building — not to us, not to any third party.
• If you connect a real OpenAI API key, that conversation goes only to OpenAI, under their own data-use terms — not through us as a middleman.
• Deleting the app removes everything it processed. There's nothing sitting on our servers to also delete, because it was never sent here.

Other real protections in place

• Passwords are one-way hashed (bcrypt) — not even we can see your actual password.
• Every login is a signed session token, not a permanent key.
• Phone and WhatsApp messages are verified as genuinely coming from Twilio using cryptographic signature checks, so no one can fake a call or message to your AI employee.
• Rate limiting protects against abuse on every public endpoint, including the one your AI employee's chat runs on.

• Businesses' Meta access tokens are sealed with AES-256-GCM before they reach the disk, and the server refuses to store one at all if it has no key long enough to protect it — rather than encrypting with a weak key and looking safe.
• Admin access is held to a header-only key compared in constant time, locked out after repeated failures, never cached, and every action that changes data or takes a copy of it is recorded.
• Unencrypted connections are redirected to HTTPS by default on any live deployment.

Reporting a security problem

If you have found a way to reach another business's access tokens or their customers' conversations, please tell us before telling anyone else. We will confirm we have received your report, keep you updated while we fix it, and credit you if you would like that.

Email with enough detail to reproduce it. Our machine-readable contact details are published at /.well-known/security.txt (RFC 9116).

Please do not test against other people's accounts, read or modify data that is not yours, or run anything that would degrade the service for the businesses using it. Use your own account. We will not pursue anyone who reports a problem in good faith and within those limits.

Deleting your data

Business owners can delete their account, their AI employees and every connected channel from Settings → Delete your account. Channels are unsubscribed from Meta first, while the tokens still work, so Meta stops forwarding messages here.

If you messaged a business that uses Hire Alien and want your data removed, you can remove the app in your Facebook or Instagram settings, which starts the deletion automatically, or use our data deletion page.

Full legal detail lives in our Privacy Policy. Questions about any of this — .