Security & privacy
How wish4 protects your account, your keys and your visitors' data.
Your account
- Sign in with email codes or Google — no passwords to leak.
- Team roles limit what each person can do; billing stays with the Owner. See Team & integrations.
Your keys
- Integration keys and app secrets are stored encrypted, server-side.
- They're never shown in full after saving, never sent to the AI model, and never embedded in your published pages.
- When an app needs a key mid-build, the AI asks through a secure request form — the value bypasses the chat transcript entirely.
Your visitors
- Site analytics is cookieless page-view counting — no ad tracking of your visitors.
- Form submissions go only to your workspace's Customers — never to third parties.
- Password-protected and members-only sites gate every page, not just the home page.
Compliance
wish4 is GDPR compliant and runs an information-security program aligned to ISO/IEC 27001. Read the privacy policy and terms.