AidoSaaS·IM is a built-in WeChat-like encrypted messaging SaaS: one-on-one and group chats, Moments, message recall/read receipts/@mentions — all included. Messages are encrypted at rest on the server with AES-256-GCM (not end-to-end), and you can deploy privately on your own servers for full data control.
New set menu is live — 10% off for regulars 🎉
One-on-one and group chats, rich message types, granular conversation controls — benchmarked against the WeChat experience.
Direct and group conversations with clear role permissions — smooth for both internal and external collaboration.
Text, image, video, voice, emoji, polls and more — express yourself fully.
Recall within 2 minutes (24h for admins); read receipts keep both sides informed.
Mention members in groups with highlighted names — important messages never get lost in the flow.
Pin conversations, mute them; quote replies, message editing and favorites all included.
Messages are persisted on the server; history auto-syncs across all your devices.
Publish Moments to reach customers — turn messaging into a private, operable marketing channel.
Publish photo or video posts (up to 9 images) for product launches, event previews and daily store life — customers see your updates right in their feed.
New messages and Moments interactions reach customers' lock screens via Web Push (including declarative Web Push on iOS 18.4+). No need to open the app — your private reach is more reliable.
Long-lived connections for real-time send/receive, auto-reconnect with incremental catch-up, and live presence and unread counts.
Self-built WebSocket gateway (messages on port 8080, control on 8081), JWT auth with a 40-second heartbeat; on disconnect, exponential-backoff auto-reconnect and offline incremental catch-up keep every message.
Message content is encrypted at rest with AES-256-GCM; keys are managed server-side and derived per session. Transport auto-upgrades to wss under HTTPS.
Message bodies encrypted with AES-256-GCM; keys managed server-side and derived per session — the database stores only ciphertext.
WebSocket auto-upgrades to wss under HTTPS; the whole link is encrypted.
All user input is sanitized to reduce XSS and injection risks.
Deploy on your own servers; media files are protected by signed URLs — your data never leaves you.
The server can decrypt — this is "encrypted storage at rest", not end-to-end encryption, which eases compliance audits and operations.
QR-code login unifies accounts across devices; standard REST APIs (JWT) make system integration easy.
A standard Nginx + PHP 8.3 + MySQL stack with an installer wizard and operations console — fully self-hostable.
The site is proxied through Nginx (8099 → PHP); the WebSocket path /ws forwards to the gateway (127.0.0.1:8080) with a control channel on 8081; Supervisor keeps the gateway processes alive.
JWT-authenticated open APIs, easy to embed into your own systems and business flows.
Authorize Web login from mobile — one account across devices, seamless experience.
Parse #user / #channel deep links to jump into a conversation from outside.
WeChat-like experience + server-side encryption + Moments marketing + private deployment; pair it with AidoSaaS·Mall so communication and commerce work as one.