Payments processed by Stripe
Your customer pays on Stripe's checkout page, certified PCI DSS Level 1. Card numbers never reach Rexenda's servers, and every charge is created directly in your own Stripe account.
Security and trust at Rexenda
What protects your account, your customers' data and the money you collect, explained without fine print.
Rexenda is a platform for selling and serving customers over WhatsApp and other channels, operated by BENDDI TECHNOLOGIES S.A. DE C.V. in Mexico. Card payments run on Stripe and go straight to the business's own Stripe account: Rexenda never sees card details or holds funds. Credentials are stored encrypted, sign-in supports two-step verification and each company's data is isolated.
How we protect you
What the product does today, not promises.
We never hold your money
Payments land in your account, not ours, and Rexenda takes no commission on them. Your Stripe account is in your name: you sign in with your own credentials and it stays yours if you leave Rexenda.
Protected sign-in
Two-step verification with an authenticator app, a temporary lockout after repeated failed attempts, and a list of active sessions you can close from your profile. Passwords are stored only as a hash.
Encrypted data and credentials
All traffic travels over HTTPS with HSTS. Integration passwords, OAuth tokens and API keys are stored encrypted, and files are kept in private storage and delivered through temporary signed links.
Isolated data and server-side roles
Each company's data is kept apart from everyone else's, and roles and permissions are enforced on the server, not just hidden on the screen. The platform's own admin area uses a separate sign-in and separate sessions.
Official integrations only
WhatsApp connects through Meta's official WhatsApp Business Platform, not unofficial tools that put your number at risk. Notifications from Meta, Stripe and Telnyx are checked against their signature before they are processed.
Your data stays yours
- We never sell personal data, and we don't use your conversations to train third-party AI models without your explicit consent.
- For your customers' data you are the controller and we act as your processor, following your instructions.
- You can ask for a copy of your data or for its deletion at any time; we apply GDPR standards to everyone, wherever they are.
- Google and Microsoft accounts are connected with OAuth, using only the permissions each feature needs.
Security questions
Is Rexenda safe and trustworthy?
Yes. Rexenda is operated by BENDDI TECHNOLOGIES S.A. DE C.V., a company registered in Mexico. Card payments are processed by Stripe and paid into your own account, credentials are stored encrypted, sign-in supports two-step verification and each company's data is isolated. You can start on the free plan without a credit card.
Does Rexenda see or store my customers' card details?
No. Your customer enters their card on Stripe's checkout page, which is certified PCI DSS Level 1. The card number never passes through Rexenda; we only receive Stripe's confirmation that the payment went through, so the quote can be marked as paid.
Does Rexenda hold the money I collect?
No. Each payment is a direct charge on your own Stripe account, so the money is never in Rexenda's hands and we take no commission on it. Stripe's processing fees, payouts, refunds and disputes are handled in your Stripe account.
What happens to my Stripe account if I stop using Rexenda?
Nothing changes: it is a standard Stripe account in your name. Disconnecting it from Rexenda only removes the link; the account, its balance and its history stay with you in Stripe.
Does Rexenda use my conversations to train AI?
No. Your content is processed only to provide the features you use, under confidentiality obligations, and we don't use your conversations to train third-party models without your explicit consent.
Can I turn on two-step verification?
Yes. From your profile you can turn on two-step verification with any authenticator app, see your active sessions and close any of them.
Who is behind Rexenda
Rexenda is a product of BENDDI TECHNOLOGIES S.A. DE C.V., a company incorporated in Mexico in 2021 (tax ID RFC BTE2108191J4).
Security or privacy questions: hello@rexenda.com