How Hova keeps your account safe
What we do today to protect your account, your wallet and the people you text. If something here matters for a decision you're making, ask us and we'll show you how it works.
Your account and keys
- Keys are never stored
- Hova keeps only a hash of each API key, so a copy of the database can't be used to send as you. A key is shown once when it's made.
- Test keys
- Keys starting sk_test_ go through every check but send and charge nothing, so developers never need a live key to build.
- Stored secrets are encrypted
- Passwords are hashed. Credentials Hova keeps for you are encrypted before they're saved.
- SMPP logins by address
- Each SMPP login can be limited to the IP addresses you list.
Your money
- Payments through Paystack
- Mobile Money and card payments are handled by Paystack. Hova never sees or stores card numbers.
- Spending alerts
- Get told when your hourly or daily spend passes the amount you set, in the dashboard or at your own server.
- Safe retries
- Send your own reference with each message and a repeated request returns the first message instead of charging you twice.
- Refunds for messages that didn't go
- Messages Hova couldn't hand to the network are refunded to your wallet automatically.
Your data and your customers'
- Signed delivery reports
- Every webhook Hova sends carries an HMAC-SHA256 signature, so your server can reject anything that didn't come from Hova.
- Encrypted in transit
- The dashboard, API and webhooks use HTTPS. SMPP is available over TLS.
- Opt-outs respected
- People who opt out of your promotional texts are skipped automatically.
- Export and erasure
- Download your data from Settings at any time, and erase a person's details when they ask, as Ghana's Data Protection Act requires.
Found a security problem?
Email support@hovagh.com with "Security" in the subject. We reply to every report. Read how we handle personal data in the privacy policy.