Security and data handling
BacklinksBot sends email in your name and reads the replies, so it treats your mailbox, your domain reputation and your contacts as the most sensitive things in the account.
Mailbox credentials are encrypted
The SMTP and IMAP passwords of the mailbox you connect are encrypted at rest with a key that never leaves the application servers. They are never shown again after you save them, and you can disconnect the mailbox at any time.
Sending stays inside safe caps
Every mailbox has a daily cap that ramps up slowly, emails go out spread over the working hours of the recipient, and follow ups stop the moment someone replies. Your domain reputation is the asset we protect first.
One opt-out list, enforced everywhere
Every email carries a one click opt-out. Anyone who opts out, replies with a stop request or bounces lands on the suppression list of your workspace and is never contacted again by any campaign.
Approval mode
Nothing has to leave without you. In approval mode each first email, follow up and negotiation reply waits in the outbox until you approve, edit or reject it.
Roles and client viewers
Owners, managers and read-only viewers. Agencies give a client access to the board and reports of one site without exposing the other workspaces.
SSO and audit log
The Agency plan adds single sign-on and an audit log of every change to sites, campaigns, mailboxes, users and billing.
Encryption in transit and at rest
All traffic uses TLS. Databases and backups are encrypted at rest. Webhook payloads for link events are signed so you can verify they came from us.
Your data, your call
Deleting a site removes its prospects, messages and history. Deleting the workspace removes everything within 30 days, when the last backup rotates out.
Found a security issue? Write to support@backlinksbot.com with the details. We reply within two business days and fix confirmed issues with priority. More detail is in the privacy policy.