# What Narciso stores about channels and how it protects it

> What data Narciso keeps for each linked channel (name, photo, access keys, password), how it is protected (encryption) and what checks it makes at linking.

Last updated: 23 October 2026. Source: https://narciso.io/en/docs/dati-dei-canali/

This entry answers «what does Narciso keep when I link a channel, and how does it protect it?». For the legal notices see [Legal pages](https://narciso.io/en/docs/pagine-legali/).

## Data kept for each channel

| Channel | What is saved | Protection |
|---|---|---|
| **Facebook** | Name and photo of the page (the photo is **copied** into Narciso's archive), page identifier, page access key, location(s), status | Key **encrypted** |
| **Instagram** | @username, profile identifiers, photo (copied), access key, location(s), status | Key **encrypted** |
| **WhatsApp Aziendale** | Access key, identifier of the number and of the business account, displayed number, verified name, location(s) | Key **encrypted** |
| **WhatsApp Personale** | Linked number, status, session keys between the Hub and WhatsApp, location(s) | Session keys **encrypted** |
| **Telegram** | Number, account session, status, location(s) | Session **encrypted**. The **code** and the **password** of the two-step verification are **never saved** |
| **Email, PEC** | Servers and ports, username, sender, security options, **password**, date of last synchronisation, location(s) | Password **encrypted**; the form **never shows it** (only «••••••••») |
| **TikTok** | Access and renewal keys with expiry dates, name, image, identifier, location(s) | Keys **encrypted** |

The encryption is **AES-256**. The passwords of the providers (Facebook, Instagram, TikTok) **never pass** through Narciso: the login takes place on the provider's site ([Linking with login on the provider's site](https://narciso.io/en/docs/percorso-guidato/)).

## Checks made at linking

- **Meta and TikTok:** the path carries a code tied to your salon that is valid for **10 minutes**; the keys stay **on the server** (the browser only sees the names); the choice of account is kept for 10 minutes and then deleted.
- **An account already linked to another salon on Narciso cannot be «stolen»**, for any channel: it has to be unlinked from the other one.
- **WhatsApp Aziendale:** the number that Narciso uses for its own checks cannot be linked.
- **WhatsApp Personale:** at most 10 checks in 10 minutes, and confirmation that the scanned phone is the **number indicated** (within 15 minutes).
- **Email and PEC:** the send test (and receive test, if IMAP is present) is repeated by the server **before** saving, except when the same mailbox has already been verified from another location or the password is unchanged ([Email](https://narciso.io/en/docs/email/)).
- **Telegram:** the number cannot already belong to another salon; the password is not stored.

## What happens to the data if you unlink

The channel's contacts, messages and attachments are deleted and the access keys erased: see [Unlinking a channel](https://narciso.io/en/docs/scollegare-un-canale/).

## Related entries

- [Linking channels](https://narciso.io/en/docs/collegare-i-canali/)
- [Unlinking a channel](https://narciso.io/en/docs/scollegare-un-canale/)
- [Privacy and consents in the automations](https://narciso.io/en/docs/privacy-e-consensi/)
- [Legal pages](https://narciso.io/en/docs/pagine-legali/)