WinGrid

Your lead's safety matters

A website key can write leads only for its own entity. The secret is stored as a hash. The same phone updates that person instead of creating another lead.

  • Hashed API secrets
  • One phone per entity
  • Stages per entity
  • Access by role

Product

The lead stays with the entity that captured it

Organizations, entities, keys, fields, and stages are separate. Nothing on this page is sample pipeline data.

One phone, one lead

Inside an entity, a phone belongs to one lead. Sending it again updates the person. The stage does not move.

Keys that can be revoked

The access key selects the entity. The secret is shown once. Revoking the key stops new pushes.

A journey per entity

Each entity has its own stages. A later stage moves the lead forward. The next entity can use a different path.

People see only their screens

A super admin grants Dashboard, Leads, Lead Management, and Settings. People stays with the super admin.

How it works

From a website key to a lead you can work

The website cannot choose a different entity. The key does.

  1. Step 1

    Add the organization and entity

    Every lead, field, stage, and API key belongs to one entity inside one organization.

  2. Step 2

    Issue a key

    The website gets an access key and a secret. The secret is shown once. WinGrid keeps only a hash.

  3. Step 3

    Capture the lead

    A new phone starts on that entity’s first stage. The same phone updates the lead and does not move the stage.

  4. Step 4

    Work the journey

    Stages belong to the entity. A later stage can move the lead forward. Another entity can use a different path.

FAQ

What is actually protected

Are organizations kept separate?

Yes. Leads, fields, stages, and API keys belong to one organization, and a key can write only for its own entity.

Can the next entity use a different journey?

Yes. You set the stages for each entity. The key stays stable. Changing a label updates the leads already on that stage. Moving leads onto another stage is an explicit map.

What if the same phone is sent again?

The existing lead is updated. Name, email, page, and the fields you send can change. The stage stays where it is.

Where is the API secret stored?

Only a hash. The secret itself is shown when the key is created. Revoking the key stops new pushes. Leads already stored stay.

Your lead's safety matters

Sign in to the workspace for your organization.