Is data encrypted in transit?

Yes. Production traffic to MojaDesk is protected with HTTPS so data in transit is encrypted.

Who can access my workspace?

Only authorised people in your account. Admins and agents have different permissions, and you decide who joins or leaves the workspace.

Are workspaces isolated from other customers?

Yes. Each business’s data is kept separate from other customers’ data.

How are passwords stored?

Passwords are stored in a hashed form. We never store them in plain text.

How do I report a security concern?

Use WhatsApp or the contact form. You can also request a security pack during a demo if your team needs more detail.

Where is data hosted?

Data handling and deployment questions can be discussed during the demo.

MojaDesk Security | Data Protection and Access

1. Overview

MojaDesk (“MojaDesk”, “we”, “us” or “our”) is committed to protecting the information entrusted to us by businesses and their customers. This page lists only controls we can confirm today.

No online service can guarantee absolute security. We work to reduce risk and respond if issues arise. Data handling and deployment questions that are not listed here can be discussed during a demo.

2. How your data is protected

Separated workspaces: Each business’s data is kept separate from other customers’ data.
Limited access: Only authorized team members in your account can access your workspace, according to the roles you assign.
Protected passwords: Passwords are stored in a hashed form. We never store them in plain text.
Encrypted connections: Production traffic to MojaDesk is protected with HTTPS so data in transit is encrypted.

3. Account and access controls

Sign-in: Accounts require valid credentials.
Roles: Admins and agents have different levels of access so your team only sees what they need to do their jobs.
Your control: You decide who joins your workspace and can remove access when someone leaves your team.

4. Website safeguards

Our public website includes additional protections for visitors and form submissions:

Security-focused HTTP response headers that reduce common browser-based risks;
Rate limiting and related protections on public forms such as contact, demo requests, and newsletter signup to help prevent abuse.

5. Privacy and compliance

MojaDesk is operated by The Site Weavers in the United Republic of Tanzania. We handle personal data in line with the Personal Data Protection Act, 2022 and related regulations.

For details on what data we collect, how we use it, retention, your rights, and breach notification, please read our Privacy Policy. This Security page focuses on confirmed platform controls; the Privacy Policy covers your legal rights and our data practices.

6. Your role

Security is a shared responsibility. You can help protect your account and customers by:

Using strong, unique passwords for MojaDesk and related services;
Granting agent and admin access only to people who need it, and removing access promptly when roles change;
Keeping messaging channel credentials and API keys confidential;
Reviewing conversation access and integrations regularly.

7. Report a security concern

If you believe you have found a security issue or have concerns about how your data is protected, please contact us promptly:

MojaDesk (operated by The Site Weavers), United Republic of Tanzania
Phone / WhatsApp: +255 767 213 119

You may also reach us via the contact page. We take reports seriously and will investigate in good faith.

Platform Security