Gather & Embed Social Proof Without the Client Friction
ClientEcho enables solo creators, developers, and agencies to collect 1-click magic link approvals, import offline praise with hardcoded trust signals, and embed sandboxed widgets in minutes.
Multi-Tenant Creator & Agency Workspace
Engineered for Modern Trust & Conversion
Every surface is designed to maximize completion rates and maintain complete database isolation.
1-Click Magic Link Approval
Draft testimonials for busy clients. Generate 32-byte cryptographically random SHA-256 tokens for instant 1-click approvals without login prompts.
Public Form & Bot Protection
Integrated Cloudflare Turnstile, strict Zod validation, DOMPurify HTML sanitization, and dual Upstash sliding-window rate limiting per IP and slug.
Sandboxed Embed Widget
Lightweight async iframe embed script serving edge-cached payloads with auto-resizing postMessage listener and cross-origin security.
Every Testimonial Is Publicly Verifiable
Click any badge across our sandboxed widgets to inspect an immutable public audit trail showing exactly when each testimonial was dispatched, opened, and cryptographically signed.
Simple, Predictable Plans for Solo Creators & Agencies
All plans include Stripe billing, encrypted magic links, and RLS security. Cancel anytime.
Free Tier
StarterIdeal for individual creators testing magic links and public submission forms.
- 1 Active Testimonial Widget
- Magic Link + Public Form Workflows
- Up to 25 Approved Testimonials
- "Powered by ClientEcho" Branding
Pro Tier
RecommendedDesigned for growing agencies and high-volume product creators requiring unlimited scale.
- Unlimited Active Widgets
- Unlimited Testimonials & Moderation
- Remove "Powered by ClientEcho" Branding
- Custom Widget Themes & Pro Font Customization
Billing is monthly, cancel anytime directly from your dashboard settings via PCI-compliant Stripe integration.
Frequently Asked Questions & Reviewer Guidance
Everything you and your clients need to know about magic links, privacy, and data ownership.
How do Magic Links work for client reviewers?
When a creator sends a Magic Link, the reviewer receives an email containing a single-use cryptographically hashed token. Clicking the link allows the reviewer to review and approve the draft testimonial with 1-click — without requiring them to create a password or log in.
What do the three trust verification badges mean, and are they clickable?
Yes! Clicking any badge opens its permanent public verification audit trail at /verify/[id]:
1. Verified Magic Link: Independently authenticated via single-use cryptographic token with full dispatched, opened, and approved timestamps.
2. Verified Direct Submission: Ingested through active public forms with Cloudflare Turnstile bot verification.
3. Self-Reported / Imported: Transparently marked manual imports entered by the creator, ensuring total honesty in social proof.
Who owns the data, and can testimonials be removed later?
Creators retain full data ownership. Testimonials can be deleted or hidden at any time from the Approval Queue. If a creator downgrades from Pro to Free, excess widgets are deactivated safely without deleting raw data.