Security

Messages are saved before anything else

Every message is written to our database before we try to alert you. If email or phone delivery fails, we keep retrying for 24 hours, and the message is always in your inbox.

Spam and bots

Our script solves a small invisible puzzle in the visitor's browser. A hidden trap catches simple bots, and a professional spam filter checks every message. Visitors don't have to do anything.

Likely spam goes to a spam folder and is never deleted early. Your alerts say how many were filtered.

Your website only

Your AI agent tells us your site's address during setup. Messages from any other website are held until you confirm it's yours.

Signing in

Sign in with Google or a 6-digit code we email you. We never email sign-in links. When an AI agent connects, you approve it on a page that shows the same code as your agent. We then email you a one-click Disconnect.

An agent's access lasts 2 hours and only covers setup. To read or export your messages, add team members, or send messages to another tool (a webhook), it needs your Allow in an email.

Emails we send

Visitor messages are shown inside a clearly marked box, with links shown as plain text. Every button in our emails opens a confirmation page first, so email security scanners can't trigger actions by accident.

Phone alerts

Notifications on your lock screen only say which website sent a message, never what the visitor wrote.

Where data lives

Ellieforms runs on Cloudflare. Messages are stored in the European Union and encrypted at rest. They are kept for one year, then deleted; you can delete any message or your whole account sooner. Message content never goes into our logs.

Our script

The script on your site is small, sets no cookies, makes no third-party requests and never changes what your visitors see. It is served only from our own domain, which we protect with registrar lock, DNSSEC and hardware security keys.

Report a problem

Email security@ellieforms.com. We reply within two working days.