Security & compliance
Security, built in.
Strong logins, clear permissions and tools for texting and emailing by the rules. Here's how Fyndol looks after your agency's data.
Login
Locked at the door.
Two-step login.
Use an authenticator app, an email code or a text message. Turn on one method or several.
Require it for everyone.
The agency owner can make two-step login a must for every person on the team.
Recovery codes. Ten one-time codes, shown once, for the day you lose your phone.
Login protection. Wrong passwords slow things down. Too many lock that login for 15 minutes.
Your devices. See where you're signed in and sign out other devices anytime.
Access
The right people.
The right data.
Private by design.
Each agency only ever sees its own clients and data. A client's login only opens that client's sub-account. Fyndol support can view an account read-only to help, and every visit is logged.
Roles that make sense.
Inside each client's sub-account, give people one of three roles: Admin, Team member or Limited. Limited users work from their own list: the contacts, chats and deals assigned to them.
Section by section. Choose which parts of the app each person can open.
View-only settings. Team members can see settings but can't change them.
Audit logs. Who changed what, with before and after. Logins and lockouts too. Export to CSV.
Infrastructure
Encrypted in transit.
Backed up nightly.
Locked connection. The app, your funnels and your custom domains all use HTTPS, set up and renewed for you.
Nightly backups. Your contacts, conversations and settings are backed up automatically every night.
No keys to paste. Texting, email and AI come built in, so you never paste a provider key. API keys are only for tools you build yourself.
Your data, your call. Export any client's data anytime. Delete your agency and it's erased after 30 days.
AI
AI that asks before it acts.
The AI Assistant and connected AI apps can suggest changes. AI that texts or answers your leads on its own stays off until you turn it on. You decide what happens.
Approval first. Proposed changes are spelled out and wait for your OK by default.
Clear limits. Connected AI apps can't send texts or emails directly, delete anything or buy anything. Changes they make can still start your live workflows.
You pick the scope. Choose which sub-accounts and permissions each app gets.
Revoke anytime. Every request is logged, and access can be removed in one click.
Texting & email compliance
Text and email
by the rules.
Consent proof, one-click unsubscribe and carrier registration, built into every client's sub-account.
Consent with proof.
By default, forms with a phone field, booking pages and the website chat widget show an unchecked texting consent box. When someone agrees, Fyndol saves the time, IP, browser, page and the exact wording.
One-click unsubscribe.
Marketing emails end with an unsubscribe link and the business's name and address. One click unsubscribes the contact.
STOP handling. Opt-out, help and resubscribe keywords are answered and honored automatically.
Quiet hours, on by default. Bulk and automatic texts sent outside 8am to 9pm wait until 8am in each contact's time zone.
Carrier registration, guided. A step-by-step form helps each client get approved for business texting (A2P 10DLC), with toll-free verification as another path.
Consent-only texting. An optional rule keeps automated texts to contacts who agreed or texted first.
Pre-send checklist. It flags anything missing, like the opt-out line. Marketing emails without a business address won't send.
These tools help you follow the rules. You're still responsible for how you and your clients message contacts. Fyndol isn't set up for HIPAA. Don't put patient health information in it. This page isn't legal advice.
Bring your agency
to Fyndol.
Fyndol is invite-only while we onboard our first agencies. Tell us about yours.