How is the contact form protected?
The Waterwair contact path uses Cloudflare Turnstile, Worker-side validation, rate limiting, and additional spam checks before a support message is accepted.
Does Waterwair store payment card numbers?
No. Payment processing is handled through Stripe. Waterwair should only receive the billing details needed to manage subscriptions and support.
Can one customer see another customer’s data?
That should not happen. Waterwair should keep support context and chatbot data isolated by customer or workspace.
How should support requests be handled?
Support requests should go to a controlled inbox, with chatbot or contact-form routing that helps the team respond without exposing internal credentials or infrastructure details.
