How Kybera keeps brands apart

Each brand is its own workspace

Every record belongs to one brand, and the database itself refuses to show it to anyone outside that brand. This is enforced by row-level security in the database, not only by the screens.

Roles limit what people can do

• Owners: everything, including deleting the brand.
• Admins: build, approve, connect accounts and add people.
• Managers: build and submit ads, pause an ad.
• Viewers: see ads, spend and reports.

Private until sent

Chats with Kybera and unsent drafts are visible only to the person who made them. Once a plan is submitted, it is frozen, and what an owner approves is exactly what gets published.

Connections and secrets

Ad platform access goes through a dedicated connection service, and brand links are encrypted at rest. Secrets are never sent to your browser.

Sign-in

Accounts are created by a brand's owner; there is no public sign-up. Repeated wrong passwords lock an account for 15 minutes.

Where data lives

The database and hosting are in Sydney, Australia. Report a security issue to info@wyplabs.com.au.