What Narciso stores about channels and how it protects it
Last updated:
Translated from the Italian guide. Narciso itself is in Italian, so the names of buttons, menus and fields are shown exactly as they appear on screen, with a translation in brackets where it helps.
This entry answers «what does Narciso keep when I link a channel, and how does it protect it?». For the legal notices see Legal pages.
Contents
Data kept for each channel#
| Channel | What is saved | Protection |
|---|---|---|
| Name and photo of the page (the photo is copied into Narciso's archive), page identifier, page access key, location(s), status | Key encrypted | |
| @username, profile identifiers, photo (copied), access key, location(s), status | Key encrypted | |
| WhatsApp Aziendale | Access key, identifier of the number and of the business account, displayed number, verified name, location(s) | Key encrypted |
| WhatsApp Personale | Linked number, status, session keys between the Hub and WhatsApp, location(s) | Session keys encrypted |
| Telegram | Number, account session, status, location(s) | Session encrypted. The code and the password of the two-step verification are never saved |
| Email, PEC | Servers and ports, username, sender, security options, password, date of last synchronisation, location(s) | Password encrypted; the form never shows it (only «••••••••») |
| TikTok | Access and renewal keys with expiry dates, name, image, identifier, location(s) | Keys encrypted |
The encryption is AES-256. The passwords of the providers (Facebook, Instagram, TikTok) never pass through Narciso: the login takes place on the provider's site (Linking with login on the provider's site).
Checks made at linking#
- Meta and TikTok: the path carries a code tied to your salon that is valid for 10 minutes; the keys stay on the server (the browser only sees the names); the choice of account is kept for 10 minutes and then deleted.
- An account already linked to another salon on Narciso cannot be «stolen», for any channel: it has to be unlinked from the other one.
- WhatsApp Aziendale: the number that Narciso uses for its own checks cannot be linked.
- WhatsApp Personale: at most 10 checks in 10 minutes, and confirmation that the scanned phone is the number indicated (within 15 minutes).
- Email and PEC: the send test (and receive test, if IMAP is present) is repeated by the server before saving, except when the same mailbox has already been verified from another location or the password is unchanged (Email).
- Telegram: the number cannot already belong to another salon; the password is not stored.
What happens to the data if you unlink#
The channel's contacts, messages and attachments are deleted and the access keys erased: see Unlinking a channel.