Help center

How can we help?

Getting started

Channels

Analytics

Billing

JUMP TOWidget JS API Changelog Roadmap Security Legal

FOR DEVELOPERS

Widget JavaScript API

Once the widget loads, window.Omnichat is available on the page. Use it to open the chat from your own buttons, pass customer data and send orders to the CRM.

CHAT CONTROL AND VISITOR DATA

Omnichat.open()        // open the chat
Omnichat.close()       // close
Omnichat.toggle()
Omnichat.identify({
  name:  "Jane Doe",
  email: "jane@example.com",
  phone: "+79990000000",
})
Omnichat.setContext({ plan: "pro", page: "/checkout" })
Omnichat.sendMessage("I need help with my order")

ORDER TO CRM (FROM THE THANK-YOU PAGE)

Omnichat.trackOrder({
  orderId:  "10045",
  total:    4990,
  currency: "RUB",
  customer: { name: "Jane", email: "jane@example.com" },
  items: [{ name: "Item", qty: 1, price: 4990 }],
})

window.Omnichatorders → CRMno keys in the browser

WHAT'S NEW

Changelog

October 2026

Integrations: Telegram notifications, leads to Bitrix24 and amoCRM, signed webhook — Settings → Integrations.
Instant message delivery: database events instead of polling the server every second.
Live demo dashboard, free website check, partner program.
One-step sign-up: Google or email + password, no password emails. Email confirmation by link.
“Launch Overcap” wizard: site → CMS module → installation check → first message.
Two-factor sign-in (2FA) with recovery codes, “Sign out other devices”, audit log.
Password reset by email link.
Modules for WordPress/WooCommerce, OpenCart, Joomla and 1C-Bitrix are available for download.

September 2026

Mobile layout for the dashboard and the site: inbox, CRM, heatmaps and settings on the phone.
“File unavailable” attachment cards instead of empty messages; message translation fixes.

WHAT'S NEXT

Roadmap

What we're working on now. The order may change based on customer feedback — tell us what you need.

In progress

Operator mobile app
English dashboard and emails
Conversation history import

Team reply templates with variables
Per-operator reports
More ready-made CMS modules

Exploring

AI reply suggestions for operators
In-country data storage options
Public REST API and webhooks

TRUST

Security

What we actually do to protect your data — no badges we don't have, only what is really in place.

Transport encryption

HTTPS only with TLS 1.3 (AES-256-GCM) and HSTS. Chat files are served with script execution disabled.

Accounts

bcrypt password hashes. Two-factor sign-in (2FA) with recovery codes. A password change or reset signs out other sessions. Sign-in attempts are rate-limited.

Data separation

Every data query is scoped to your organization; operator and admin roles separate access to settings.

Backups

Daily, AES-256 encrypted, stored off the server; restores are tested weekly.

Audit log

Sign-ins, 2FA, password changes, site deletions and exports are recorded with IP and time.

Servers

Dedicated server in Kazakhstan (Almaty); admin access by SSH keys only.

TLS 1.32FADaily backupsAudit log

Found a vulnerability? Email support@overcap.ru — we'll respond and credit you.

LEGAL

Documents