Production checklist

Lock domains, verify the reply loop, invite teammates, and confirm export/delete before real traffic.

Before first visitor

1) Install the script with data-site on your production host. 2) Add allowed domains in Settings (do not leave the list empty in production). 3) Send a test message from the live origin or the dashboard test panel. 4) Confirm the bubble appears only on intended hostnames.

Reply channel

Pick exactly one active destination: inbox, Slack, Discord, or Telegram. Send a real visitor message and reply from that destination. If using webhooks, configure the URL, store the signing secret server-side, and verify HMAC on a test event.

Team and data

Invite teammates from Team. Confirm Billing shows trial end date and upgrade path. Practice export (JSON/CSV) and conversation delete from Settings → Data so you know the path before a customer asks.

Legal on your site

Update your privacy/cookie notice to mention chat and any identify() fields. Obtain consent where required. Avoid sending sensitive categories through the widget unless your policies support it.

Go-live

Watch Status for platform notices. Keep security@canwechat.dev handy for vulnerability reports. After trial, subscribe via Billing → Dodo portal; cancel the same way.