Trust, Safety & Security Policy
At MantionPlus, user safety, account health, and privacy are core to our development lifecycle. Here are the security standards built into the platform.
Official Instagram Graph API Integration
Built exclusively around official Meta developer APIs. We do not use scraping, private API workarounds, or violate Meta Guidelines.
Two-Factor Authentication (2FA)
Secure your administrative access with Email OTP verification during authentication and login attempts.
Session Management
Monitor active logins, track browser and IP details, and revoke active sessions instantly from your security settings panel.
Secure Hashing & Password Protection
Your user passwords are encrypted using secure industry-standard bcrypt hashing functions before saving to database schemas.
Immutable Audit Logs
We track and log critical system configuration changes and administrative updates to prevent unauthorized actions.
Webhook Security & Signature Verification
All inbound webhooks received from Meta are cryptographically verified using SHA-256 signature hashes and secure tokens.
Automatic Rate Limiting
Built-in platform rate-limit protections monitor API usage spikes to block brute-force attempts and automated spam requests.
Privacy-First Architecture
Only requested conversation keywords and message IDs required for trigger workflows are processed. Stored data stays secure.
Third-Party Security Practices
Payment transactions are processed entirely through Razorpay, utilizing secure PCI-compliant interfaces. Sensitive credentials like API keys or tokens are encrypted at-rest and accessed securely.