Transparency

Release Notes

What was actually shipped. See what's planned on the Feature Board, and known limitations under Known Issues.

As of: 2026-11-08 · Phase: Alpha · current version: 1.1.60 (2026-11-08). Since 2026-10-09 (version 1.1.14) every release has a version number; older entries are listed by date.

Release Notes Known Issues Feature Board Status Legal Archive

8 November 2026 — Version 1.1.60: custom roles, change log with search, signed-in devices, safer integrations and fixes from our own security test

In short: you create your own roles – for example “Doctor”, “Assistant” or “Front desk” – and decide exactly what they may do. The change log has search, filters and CSV export, “My profile” shows your signed-in devices so you can sign them out, API keys get their own permissions and an expiry date, and webhooks are signed with a timestamp. Plus security fixes from our own security test and three fixed bugs – unfinished replies in the inbox now survive a page reload. Known limitations: Known Issues.

Area	Type	Change	Known limitation
Team	New	Custom roles: Under Settings → Team & permissions → “Manage roles” you create your own roles, empty or as a copy of an existing role. For each permission you tick a box and choose whether it covers own records only or all. You pick custom roles when inviting, and you can rename them and delete them once nobody has them any more. Guide	The standard roles stay as they are (make a copy to adjust one). You can only give permissions you have yourself – also when assigning roles and inviting; a team lead can therefore no longer create an admin. There is no ready-made “Practice” template yet. Known Issues
Security	New	Change log with search: The log now has a search, filters for time range, person and type (e.g. “Sign-in & 2FA”, “Team & roles”) and pages instead of an endless list. Admins can download it as CSV – that, too, shows up in the log afterwards.	The log still can't be changed. CSV export is for admins only.
Security	New	Signed-in devices: Under “My profile” you see where you're signed in (browser, device, shortened IP address, last active). Sign out single devices or all others with one click. Admins can sign a person out everywhere, e.g. when a phone was lost.	We don't show a location. Only people with the same or fewer permissions can be signed out everywhere.
Integrations	New	API keys with permissions and expiry: Each key gets its own permissions (read contacts / create and update contacts), an optional expiry date and can be renewed – the old key keeps working for the time you choose (immediately, 24 hours, 7 or 30 days). Guide	Existing keys keep working with full permissions until you choose “Set permissions”.
Integrations	New	Webhooks signed with a timestamp: Every delivery carries `X-TheY-Timestamp` and `X-TheY-Signature`. You see the secret only once when you create the webhook; afterwards it is stored encrypted, and you can renew it at any time. Verification example	The old `X-KSCRM-Signature` header is still sent and will be removed with version 1.2.0 – please switch by then.
Security	Security	Security fixes from our own security test: We tested the CRM ourselves and fixed everything important. Sign-in: after 5 wrong 2FA codes you sign in again, after 10 within 15 minutes the account is briefly locked. After 10 wrong passwords for an address there is a 15-minute pause, and “Forgot password” sends at most 3 emails in 15 minutes. Email templates, headers and footers, notification emails and signatures are cleaned of harmful code when saved. Webhooks, buttons and flows now only call public addresses. CSV exports are protected against spreadsheet formulas.	Sign-in by link still works during the password pause. Clean templates stay unchanged. In the cloud, own mailboxes only connect to public mail servers on the usual ports (SMTP 25, 465, 587, 2525 · IMAP 143, 993).
Finance	Improved	When you've paid more input VAT than you've charged, the tile now says “VAT credit (preview)” and shows the amount without a minus. “Expenses” now says it's this month.	–
Sign-up	Improved	The industry list reads “Travel agency (Austria/Germany)” or “Other / no industry” – more industries will follow.	–
My profile	New	As an admin you can now switch “No setup tips by email” on or off later under “My profile”.	Cloud only.
Legal texts	New	As an admin you now also see new versions of the Data Processing Agreement and the privacy policy in the app, with a link to the new version. With one click you confirm you've read it, or object with a short reason (for the DPA until the end of the deadline).	Cloud only. One response counts for the whole account.
Turkish	Improved	The video call and booking links now use the polite “siz”. Applying the travel agency pack in Turkish gives you Turkish quick replies and reminders.	The pack's pipeline, fields, WhatsApp drafts and sample data stay in German for now.
Inbox	Fixed	Unfinished replies, notes and email recipients survive a page reload. “New chat” also keeps subject and text.	Drafts stay only in your browser and are removed when you send, sign out, or after 7 days.
Reports	Fixed	“Avg. first response” in reports and “First response” in a ticket now count from the customer's first message, so conversations you started no longer look slow.	–
Calendar	Fixed	New meeting on a contact page: the contact is already added as a participant and gets the invitation (can be removed).	A meeting created from the inbox doesn't add the customer yet. Known Issues

For self-hosters (1.1.60)

Available since 8 November 2026 via :latest – automatic updates fetch the version at night. Update worker and app together (update.sh does that). If the phone system is set up, the worker sets it up again once when it starts, without dropping running calls.
Four small database changes run automatically with the update: last activity per sign-in, permissions and expiry for API keys, encrypted webhook secret and tables for legal notices (empty for self-hosters).
Redis with a password: New installations with install.sh protect Redis with a password automatically. Existing installations keep running without a password. To add one: put REDIS_PASSWORD (lowercase letters and digits only, e.g. from openssl rand -hex 24) into .env, adjust the Redis lines in your Compose file, then run docker compose up -d. Guide
Phone system: it no longer loads IAX2, DUNDi, Unistim and ARI (the CRM doesn't need them). This takes effect at the next restart of the phone system (docker compose up -d --force-recreate asterisk – ends running calls).
Network: own mail servers on your home network stay allowed – the new mail-server check only applies in the cloud. Webhooks, buttons and flows only go to public addresses, also when self-hosted; a switch for targets on your own network is planned.
NODE_ENV=production belongs in .env (installations with install.sh already have it).
install.sh is new (Redis password); update.sh and SELF-HOSTING.md are unchanged.

8 November 2026 — Version 1.1.59.1: security fix in the phone system

In short: for calls to outside numbers, the phone system now only accepts dialled numbers as digits. Normal calls work as before, and there is nothing for you to do.

Area	Type	Change	Known limitation
Phone	Fixed	Dialled numbers only as digits: Until now, an account could use another account’s phone line through a specially crafted number. Now the phone system only takes the digits of a number dialled to the outside and dials nothing else. We found this in our own security test; we have found no signs that anyone used it.	Extensions, normal numbers and emergency calls work as before. The phone system set itself up again automatically during the update.

For self-hosters: available via :latest since 8 November 2026 – automatic updates fetch it at night. Compared with 1.1.59 there is nothing to do: no database change, no new settings. Update worker and app together (update.sh does that); if the phone system is set up, it sets itself up again once when the worker starts. install.sh, update.sh and SELF-HOSTING.md are unchanged.

8 November 2026 — Version 1.1.59: consistent amounts and dates in the English interface, test environment in the language of the demo, self-hosting without a domain on your home network

In short: in the English interface, amounts and dates now use the English format everywhere, and a new test environment starts in the language of the demo. The conversation list, the customer panel and the call flow diagram are fixed. Self-hosted: install with the IP address on your home network, images embedded in emails, interface in the browser language. Known limitations: Known Issues.

Area	Type	Change	Known limitation
Interface	Improved	English interface: amounts and dates consistent. Finance, invoices and the report showed amounts and dates in the German format (“€ 1.300,00”, “07.11.2026”), everything else in the English one. Now they all follow the interface language.	In Workplace (shift plan, time tracking), custom objects, search and history, dates and numbers are partly still in the German format. Known Issues
Demo	Improved	New test environment in the language of the demo: If you start the demo in English or Turkish, the account language is now English or Turkish (before: “Automatic (Deutsch)”), and the form of address towards customers is set to formal (“Sie”).	—
Inbox	Fixed	Conversation list: with the “Overdue” badge only “A…” was left of the name. The name now stays readable and the badges move to the next line.	—
Inbox	Fixed	Customer panel: “— no deal —” appeared above a deal. The option is now called “— not linked —”.	—
Phone	Fixed	Call flow (diagram): the line from the phone number to the queue was missing and a line ran off the left edge; the “Otherwise (default target)” node showed its name twice.	—
Readability	Fixed	Dark mode: easier-to-read buttons in the first-time setup (self-hosted) and “Add to calendar” on the booking page.	—

For self-hosters (1.1.59)

Available since 8 November 2026 via :latest – automatic updates fetch the version at night. Update worker and app together (update.sh does that).
“Translate” only when it works: without a translation service the inbox no longer shows the “Translate” buttons.
Installing without a domain on your home network: when the installer asks for your domain, just enter the server's IP address – the installer sets everything up for http://. Links in emails and notifications then point to http://<IP> (before: https://<IP>, where nothing answered) and only work inside your own network. Please set APP_URL exactly the way you open the app in the browser (with port). Guide
Images in emails on a home network: the logo and images from email templates are embedded in the email when the installation can't be reached from outside – recipients now see them.
Language: on the first visit the app uses the browser language (German, English or Turkish). To fix it: DEFAULT_LOCALE=en in the .env. Guide
The Caddyfile created by install.sh now passes the visitor's real address (X-Real-IP) like the template – for rate limits and logs. New on the-y.at: install.sh and SELF-HOSTING.md (German); update.sh is unchanged.
One small database change (a new table for counters, empty for self-hosters) runs automatically during the update. New optional setting: DEFAULT_LOCALE.

6 November 2026 — Version 1.1.58: your camera while sharing, online booking “from tomorrow”, email with Cc, Bcc and forwarding, reminders by WhatsApp or SMS

In short: when you share your screen in a video call, your camera stays visible. Booking links have their own menu item and the setting “From the next day”. Email replies go to whoever wrote last – with Cc, Bcc and forwarding. Campaigns only count opens and clicks if you turn it on, and flows remind customers of appointments by WhatsApp or SMS. The-Y is now blue. Known limitations: Known Issues.

Area	Type	Change	Known limitation
Video	New	Your camera stays visible while you share: When you share your screen in a video call, the other person now sees you small and round in the bottom right of the shared picture (“Also show my camera, small”, can be turned off).	Only on a computer and in browsers that can record a canvas. If the video tab is in the background, the shared picture can stutter briefly – then turn the bubble off. Known Issues
Video	Improved	Sharp or smooth: Before sharing you choose what you're showing: “Text and forms (sharp)” as before, or “Video and movement (smooth)” – up to 30 frames per second.	“Smooth” is a little less sharp. With the bubble, “sharp” keeps sending about 10 frames per second instead of about 1 (a bit more data).
Online booking	Improved	Its own menu item “Online booking”: Your booking links are now under “Online booking”, right below “Calendar”. In the calendar, “Manage booking links →” takes you there.	Like the calendar, “Online booking” can't be hidden under Sections.
Online booking	New	“Earliest appointment: From the next day”: New when editing a booking link: “Earliest appointment” – “Same day (with minimum notice)” as before, or “From the next day”. Guests then only see free times from tomorrow, no matter when they book.	“From the next day” follows your account's time zone, not the guest's.
Email	New	Replies go to the right person: When you reply in a conversation, the email now goes to whoever wrote last – even from a different address. You see the recipients above the reply box and can change them. Guide	Emails from before 1.1.58 have no To/Cc stored: “Reply” goes to the conversation's address there, “Reply all” without Cc.
Email	New	Cc, Bcc and “Reply all” when replying and in new emails; “To” takes several addresses (up to 20 per email).	Search doesn't find conversations by Cc addresses. New emails still without attachments. Known Issues
Email	New	Forward: Forward any email in a conversation, attachments included; it shows up in the history, and replies land in the same conversation.	Only from email conversations.
Campaigns	Changed	Count opens and clicks only if you want to: New campaigns no longer count opens and clicks by themselves. Turn it on per campaign (“Count opens and clicks”) – only if your recipients have agreed to being counted. Existing campaigns are set to “off”; earlier numbers stay visible. Links in campaign emails only lead to destinations that are actually in the campaign.	Old emails whose link is no longer exactly in the campaign text show “Invalid link”. Known Issues
Phone	New	Answered calls land in the inbox: If a call is forwarded to your mobile and answered there, a conversation is now created even without the CRM phone open (“forwarded · answered” with duration) – open like a ticket, your team closes it.	If only the mobile's voicemail picks up behind a forward, the call counts as “answered”. These conversations aren't assigned to anyone.
Flows	New	Appointment reminders by WhatsApp or SMS: New trigger “Appointment coming up” (default 24 hours before, once per contact; cancelled appointments get no reminder, rescheduled ones get a new one). The template “Appointment tomorrow → reminder” uses it: WhatsApp template, and if that doesn't work, SMS – through your own WhatsApp or SMS account. Works for online bookings too. Guide	An appointment that is only created within the lead time, or moved into it, gets no reminder; neither does an appointment only on a deal without a contact.
Flows	Changed	Google reviews: ask everyone, not just happy customers: Google doesn't allow asking only satisfied customers for a review. The template is now “Ask for a Google review after the conversation” and asks after every closed conversation. Flows that only ask from 3 stars up show a notice (they keep running unchanged). The request counts as marketing: by WhatsApp, SMS, Messenger and Instagram only with consent, by email not to people who unsubscribed and with an unsubscribe link.	Old “Good rating → Google” flows keep running; they only show the notice.
General	Changed	New logo and colour: The-Y is now blue. App icon, sidebar and buttons carry the blue Y. Brand colours you picked yourself stay as they are.	—
WhatsApp	Fixed	The “Number not verified” notice no longer shows for numbers that are connected and working normally.	—
Dashboard	Fixed	Appointments showed one hour early – now in your account's time zone, also in “My calls” and the trash.	—
Interface	Fixed	Conversations from calls were called “Visitor” – now “Conversation #123”. Inbox and header in narrow windows: badges no longer wrap, your name and “Sign out” no longer overlap. Amounts in the same format everywhere; profile initials only from letters; template notices show display names instead of technical names.	Phone numbers are not yet in the same format everywhere.
Readability	Fixed	Easier to read: buttons with white text in dark mode, priority and SLA badges, the selected conversation in the list, channel chips and the public booking page.	Already before 1.1.58: some select and number fields are not linked to their label for screen readers. Known Issues

For self-hosters (1.1.58)

Available since 6 November 2026 via :latest – automatic updates fetch the version at night. Update worker and app together (update.sh does that).
Phone system right in the installer: one question, done – install.sh asks whether to set up the phone system as well. Already installed? Fetch the new install.sh in your installation folder and run bash install.sh --add-phone: cd ~/the-y-crm && curl -fsSL https://the-y.at/install.sh -o install.sh && bash install.sh --add-phone. Ports, forwarding behind your own web server and switching it off: guide.
New on the-y.at: install.sh, update.sh and SELF-HOSTING.md (German). With a phone system set up by the installer, update.sh takes over the phone system's base files after every update with a new worker. Without a phone system you don't need to download anything again.
Sign in over http in your home network (e.g. http://192.168.1.10:3000, home-server app stores): now works when APP_URL starts with http://. For access from outside, please use a domain with https. Guide
Four small database changes (migrations 0246 to 0249) run automatically during the update. No new setting.

5 November 2026 — Version 1.1.57: Sign in with an email link or Google, sign up without a password, easier to read

In short: you can now sign in without a password – with a link by email or with your Google account. The password is optional when you sign up, My profile shows your sign-in methods, and colours and contrast are easier to read in light and dark mode. Known limitations: Known Issues.

Area	Type	Change	Known limitation
Sign-in	New	Sign in without a password – email link: The sign-in page now has “Email me a sign-in link”. You get an email with a button and a 6-digit code. Click the button, confirm — done. Reading the email on your phone but sitting at your computer? Just type in the code. The link and code are valid for 15 minutes and work once. If you have two-factor sign-in turned on, we'll ask for your code afterwards as usual. Guide	Enter the code in the browser where you requested the link. “Remember this device for 30 days” only applies to signing in with a password – after the link we always ask for the 2FA code. We send at most 3 links per address in 15 minutes and 10 per day.
Sign-in	New	Sign in with Google: You can now sign in or sign up with your Google account. If you already have an account with the same address, confirm once with your password or a link – we never link without your confirmation. You can see and remove the link under My profile. Google only sends us your ID, your email address and your name – no profile picture and no access to your Google account. Guide	If you have two-factor sign-in turned on, we always ask for your code afterwards. If you confirm the link by email, it only works in the browser where you chose “Sign in with Google”. Known Issues
Sign-up	Improved	Sign up without a password: The password is now optional when you sign up. If you leave it empty, we'll send you a link to confirm — one click and your account is ready. You can set a password any time later under My profile.	Your account is only created once you confirm the link in the email (valid for 15 minutes).
Account	New	My profile: “Sign-in methods”: My profile now shows how you can sign in: with a password (set or not — without one, use “Set a password”) and with an email link.	—
General	Improved	Easier to read: Colours and contrast have been reworked in light and dark mode so text is easy to read everywhere.	—

For self-hosters (1.1.57)

Available since 5 November 2026 via :latest – automatic updates fetch the version at night. install.sh, update.sh and the other scripts are unchanged – you don't need to download anything again.
Two small database changes (new tables for signing in, migrations 0244 and 0245), applied automatically during the update.
“Email me a sign-in link” appears once a system mailbox is set up. Turn it off with AUTH_MAGIC_LINK=off.
“Sign in with Google” is off by default for you. To use it, you need your own Google project: GOOGLE_OAUTH_CLIENT_ID, GOOGLE_OAUTH_CLIENT_SECRET and AUTH_GOOGLE=on; redirect URI at Google: https://your-address/api/v1/auth/google/callback.
File storage: new S3 library, security warnings fixed – nothing to change.

5 November 2026 — Version 1.1.56: Demo starts in a conversation, sign up without a company name, emails to your customers only through your own mailbox

In short: the demo now starts right inside a sample conversation, the company name is optional when you sign up, and emails to your customers only go through your own mailbox (bug fixed). Team notifications via our system mailbox come without content, and system emails go through a data centre in the EU. Known limitations: Known Issues.

Area	Type	Change	Known limitation
Demo	Improved	You start right inside a conversation: Opening the demo now takes you into a sample conversation: a customer just called, nobody picked up, and she followed up on WhatsApp. A small “Reply here” tip shows where to answer — with a ready-made suggestion if you'd rather not type. Shortly after, the customer replies. If you'd rather look around first, one click takes you to the overview.	The customer’s reply comes a few seconds after yours. If the tab is in the background or you have already left the conversation, it arrives as soon as you look back in. The “View only” sample company still starts on the overview.
Sign-up	Improved	Sign up without a company name: The company name is now optional when you sign up. If you leave it empty, your workspace is named after you for now. Add the right name under Settings → Company — your default brand is renamed along with it.	After “Reset account” the provisional name stays, but the note under Settings → Company no longer appears. You can still change the name there at any time.
Email	Fixed	Emails to your customers only go through your own mailbox: Booking confirmations, appointment invitations and reminders to contacts, and the customer survey by email used to go through our system mailbox when you had no mailbox of your own. That is fixed: these emails now only go through the mailbox you connected under Settings → Channels. Without your own mailbox, you'll see a note with “Connect mailbox” in the places affected.	Without your own mailbox these emails are not sent – that is intended. There is no list of unsent emails in the CRM; look out for the “Connect mailbox” note.
Email	Changed	Team notifications without content when they go through our system mailbox: Without a mailbox of your own, notification emails (new message, mention, task due, appointment reminder, report summary …) now only say that there is something new and link into the CRM — no names, message texts or figures. With your own mailbox they include the content as before.	The report summary then also comes without figures; you see the content in the CRM.
Email	Improved	System emails via a data centre in the EU: Since 5 November 2026, emails that crm.the-y.at itself sends to you and your team (e.g. notifications) go from our servers in Austria directly through a sending service with a data centre in the EU. Details in the privacy policy.	Applies to crm.the-y.at. Self-hosters send through their own mail server.

For self-hosters (1.1.56)

Available since 5 November 2026 via :latest – automatic updates fetch the version at night. install.sh, update.sh and the other scripts are unchanged – you don't need to download anything again.
One small database change (a new column for demo measurement, migration 0243), applied automatically during the update. No new setting needed.
Emails to customers need your own mailbox (as for campaigns).

1 November 2026 — Version 1.1.55: Maintenance update

In short: a maintenance update without visible changes in your account. The demo page no longer has its own short privacy paragraph; the privacy link at the bottom of the page stays.

For self-hosters: available via :latest since 3 November 2026 – automatic updates fetch it at night. The same update also brings 1.1.54 (until then :latest was 1.1.53.1); what happens is listed under 1.1.54. 1.1.55 itself brings one small database change (two new tables that only the operator of crm.the-y.at uses), applied automatically during the update. No new settings. install.sh, update.sh, schluessel.sh, backup.sh, restore.sh and SELF-HOSTING.md (German) are unchanged since 1.1.53.1 – nothing to download again. Coming from a version before 1.1.53.1? The one-time steps are listed under 1.1.53, 1.1.52 and 1.1.51.

27 October 2026 — Version 1.1.54: Screen sharing in video meetings, several time windows for booking links, reliable forwarding to your mobile

In short: you can now show your screen in video meetings, booking links support several time windows per day, their own display name and the time zone – and forwarding to your mobile after the greeting now works reliably. Known limitations: Known Issues.

Area	Type	Change	Known limitation
Video meeting	New	Share your screen: In a video meeting you show your screen or a single window with one click – and your guest can do the same. A short note reminds you to only show what the other person may see. Whoever is watching gets the screen large and complete. Stop with “Stop sharing” or your browser’s bar – then you see the camera again. Nothing is recorded.	Camera and screen at the same time doesn’t work yet: while you share, the other person sees your screen instead of your camera (planned for a later version). On phones and tablets you can usually only watch, not share (the browsers there don’t allow it).
Video meeting	Improved	Sound comes first: Sound now travels separately from the picture and gets priority; the picture is a bit smaller and uses far less data (even less on phones). Calls stay understandable on weak connections and start faster. When sharing your screen, text stays sharp.	On very weak connections the picture gets blurrier or choppy first – the sound should keep going. To keep text sharp, the shared screen comes with few frames per second (at most 10, often just one when the picture is still) – with movement it looks a bit choppy.
Video meeting	New	Connection info: A small “i” in the picture shows how the connection is doing (direct or via our server, delay, sound loss, picture size) – handy when support asks.	—
Video meeting	Fixed	Buttons easy to see: Microphone, camera, share screen and hang up are now clearly visible in light and dark mode – before, depending on the device, they were hard or impossible to see.	—
Video meeting	Improved	Join without a camera: If you have no camera, you can still join – with sound, you see the other person and can share your screen. The other side sees “Camera off” instead of a black picture.	—
Booking links	New	Several time windows per day: For each booking link you set your own times under “Bookable times”, e.g. 10–12 and 2–5 pm – your lunch break stays free without placeholder appointments in the calendar. Up to 4 windows per day; “Copy Monday to Tuesday–Friday” saves typing. Without custom times, your working hours apply as before.	Time off, other appointments and public holidays still block slots. If a link has several hosts, its times apply to all of them.
Booking links	New	Your name on the booking page: Per link you choose which name guests see (e.g. “Nuri from The-Y” instead of the user name) – on the booking page and in the confirmation.	Reminders and emails about a rescheduled appointment still show the user’s name.
Booking links	New	Time zone shown: The booking page says which time zone the times are in (e.g. “Vienna – Central European Time”). Guests in another time zone see their local time under each slot.	—
Booking links	Improved	See which times apply: The list of booking links shows when each link can be booked. If you haven’t entered working hours yet, it honestly says “Mon–Fri 9 am–5 pm (default)” – with a link to “My hours”.	—
Phone	Fixed	Forwarding to your mobile after the greeting: If a group plays a greeting while it rings and the call then goes to an external number (e.g. your mobile), the system now answers the call right away. Before, callers sometimes heard “subscriber not available” – for example when you called from that very mobile yourself.	The caller pays from the greeting on (as with a menu). Groups without a greeting and groups that only forward internally stay as before: free for the caller until someone answers.
Phone	New	Always play the greeting: New checkbox under “Greeting while it rings”: callers hear your greeting even if nobody can answer right now (nobody signed in or everyone on “Do not disturb”) – after the ring time the call moves on to “If nobody is free”. Unticked, everything stays as before.	When ticked, the system answers the call right away. If nobody can answer, the caller still waits for the ring time.
Phone	New	Don’t sign in the phone in this browser: A checkbox in the phone at the bottom right and under Telephony → My phone. Handy for a second browser or when you help out at a colleague’s computer: nothing rings there and no calls get picked up by mistake.	Applies to this browser only – a private window forgets it when closed.
Demo	Improved	From the demo to your own account: The demo shows a small “Like it?” tip with a “Sign up free” button once – after the first answered test message or after a few minutes. You can close it and it won’t come back.	—

For self-hosters (1.1.54)

Available since 3 November 2026 via :latest, together with 1.1.55 – 1.1.54 did not come via :latest on its own. Automatic updates bring the new version at night.
Small database changes (migrations 0239–0241, including two new fields for booking links and one for groups) run automatically on start. They only add. No new settings, no new script.
The phone system is set up again once automatically after the update (reloaded, not restarted – calls in progress continue). Afterwards only groups with a greeting whose calls then go to an external number behave differently (see “Forwarding to your mobile after the greeting” above).
Your own TURN server for video meetings (coturn): if you blocked your server’s own public IP there (--denied-peer-ip=<own IP>), remove that block – otherwise connections break when both sides are on mobile data or behind a router. The firewall protects the services on that address instead (from outside only 3478 UDP/TCP and 49152–49252/UDP open).

25 October 2026 — Version 1.1.53.1: Two-factor requirement applies everywhere, two display issues fixed

In short: your account’s two-factor requirement now applies everywhere, a software library is up to date, and two small display issues are fixed.

Area	Type	Change	Known limitation
Security	Improved	“2FA for everyone” applies everywhere: If you made two-factor sign-in mandatory under Team & permissions, a person without 2FA can, once the grace period is over, only open “My profile” – set up 2FA there, change name/password/language – or sign out. This applies to every sign-in with username and password. After setup, “Done” takes you straight into the app.	API keys (Settings → Integrations) belong to the account, not to a person, and keep working as before. Email or push notifications to devices that are already signed in continue.
Security	Fixed	A software library the app uses to check input has been updated to a current version that includes a security fix.	Nothing changes for you. If a list is longer than allowed (e.g. more than 3 buttons in the brand kit), the app now only reports “too many” for the list, not each single entry as well.
Team & permissions	Fixed	In Team & permissions and when inviting, the role is now called “Team lead” instead of “Supervisor”; open invitations show the role name instead of an internal key.	A few other places (e.g. role selection in flows) still say “Supervisor” – did not come with 1.1.54, follows later. Custom or renamed roles keep their names.
Flows, phone	Fixed	Time fields are wide enough for the 12-hour format some browsers use (“09:00 AM” is no longer cut off).	—

For self-hosters: available via :latest since 26 October 2026 – automatic updates fetch it at night. Compared with 1.1.53 there is nothing to do: no database change, no new settings. Coming from an older version (until then :latest was 1.1.50)? The same update also brings 1.1.51 to 1.1.53 – the one-time steps are listed under 1.1.53, 1.1.52 and 1.1.51.

25 October 2026 — Version 1.1.53: Tidier, built for teams, one set of opening hours for everything

In short: settings are tidier – basics on the left, less common options under “Advanced”, and a search that also finds “service PIN”. “Templates” now say what they are, and “Automation” is now called “Flows”. You enter opening hours only once, and holidays now apply to the automatic reply too. The inbox is built for teams: search in message text, @mentions, a task straight from the conversation and “who is looking right now”. An assistant sets up telephony from three answers, web chat visitors become contacts, campaigns show their delivery, and you can change your account's address yourself. Guides: Settings · Inbox for teams · Phone assistant · known limitations: Known issues.

Area	Type	Change	Known limitation
Settings	Improved	Tidied up: a navigation on the left with the basics (Company, Team & permissions, Channels, Phone, Opening hours & holidays, Assign conversations, Notifications, Sections), less common options under “Advanced” (remembered per person), “Account & subscription” at the bottom. Every page carries the same name as in the navigation and explains in one sentence what it is for. On phones a list instead of tiles. Guide	“Snippets & email templates” takes two lines in the sidebar. The “Save changes” bar exists only on “Logo & colours” so far; its question when leaving does not appear for the browser's back button.
Settings	New	Show and hide sections: under Settings → Sections you hide what your team doesn't use – the sidebar gets shorter, your data stays. New accounts start with a tidy sidebar (inbox, contacts, deals, tasks, calendar, snippets, knowledge – calls, AI and your own lists appear once they're set up); team chat, finance, marketing, reports and more can be switched on with one click. Existing accounts stay as they are. Guide	Hidden sections stay reachable via links and search (with the note “Show in sidebar”). “Calls” also appears in new accounts without a phone line.
Settings	Improved	Search: the search at the top now also finds settings by parts of a word – “Service-PIN”, “Service PIN” or “servicepin” take you straight to your account – and shows pages instantly as you type. “Time zone” is under “Company”, “holidays” under opening hours.	When you search for single words, side matches appear further down.
Settings	Changed	New names: “Templates” now say what they are: “Snippets & email templates”, “Flow templates” and “Phone templates”. “Automation” is now “Flows”, “Team” is “Team & permissions”, “Opening hours” is “Opening hours & holidays”, “Security” is “My profile”.	The industry pack still says “quick replies”.
Permissions	New	A permission for team leads: with “Manage inbox rules”, team leads set opening hours, conversation assignment, response times and the customer survey – without access to account and subscription. They find their pages via search too. The permissions are now called “View/assign/close conversations” and “Manage integrations”. Guide	New accounts still call the role “Supervisor” in “Team & permissions” and in the invitation, while the new texts say “team lead” – it is the same role.
Account	Improved	“My profile” (with password, 2FA, language and light/dark) now sits in the menu under your name at the top right. On laptops the feedback button sits at the bottom of the sidebar and no longer covers anything.	—
Inbox	New	Several mailboxes: email conversations show which of your mailboxes the customer wrote to (“to office@…”). With several mailboxes or numbers, the list shows it per conversation and you can filter by mailbox – or by channel with buttons.	The “Mailbox” filter and the channel buttons are not remembered. A newly connected mailbox appears in the filter only after reloading.
Inbox	New	Search in text: search now also finds message text, internal notes and phone numbers (+43, 0043 or 0…) and shows where it matched – across views too (“Search all conversations”). Guide	Message text from 3 characters and within the first 4,000 characters of a message, without matching umlauts or typos. Attachments are not searched.
Inbox	New	For teams: create a task or an appointment from any conversation with one click. Bring colleagues in with “@name” in an internal note, and see who has a conversation open or is already replying.	An @mention shows up in the bell and by email, not yet as a push on your phone. An appointment from a conversation does not send the customer an invitation.
Inbox	Changed	Reply templates are now called “snippets” – type “/” before you have any and the inbox tells you where to create them. On phones, views are a dropdown; on laptops there are keyboard shortcuts (list under “?”).	The “e” key closes a conversation without asking.
Opening hours	New	One set of opening hours for everything: you now enter your opening hours only once – they apply to web chat, email, WhatsApp & co., response times and flows. If a channel differs, just give it its own hours (lunch breaks included). Your existing settings keep working as before. Guide	Channels that never had hours saved show “No hours so far” (closed, as before). “Set all to ‘Like opening hours’” takes over the weekly plan.
Opening hours	Improved	New accounts start with a suggestion (Mon–Fri 9–5) instead of “closed all week” – it applies once you save. On holidays the automatic reply sends the “outside hours” text. When you switch it on, a ready-made text is filled in; without text the app warns you before saving. Take over your phone hours from the opening hours with one click.	If the holiday list is empty, the phone uses the public holidays of Austria or Germany, the automatic reply does not.
Company	New	Settings → Company: name, country, time zone, language and form of address in one place. Pick the time zone from a plain-language list, e.g. “Vienna – Central European Time”. The account language applies to all automatic messages to customers whose language is unknown, and the customer survey addresses your customers the way you set it. Guide	German-language accounts with the default survey text and formal address switched off now send the survey in the informal form (before: always formal) – switch the formal address on or save your own text. Changing the country under “Company” also changes the default tax rate and chart of accounts if accounting is set up (you are asked first).
Flows	Improved	One starting point: “New flow” asks how you'd like to start – from a flow template, from scratch in the builder or from one sentence with AI. Existing rules can be edited as before. The gallery now offers 25 flow templates. Guide	The API still creates simple rules.
Flows	New	“What runs automatically?”: the flows page shows at a glance what runs automatically for you – from the opening-hours reply and conversation assignment to payment reminders – with a link to each setting and a warning if customers would get two replies.	The overview shows the state when the page was loaded.
Flows	New	Schedules per record and “deal sits for X days”: schedules can run for every matching deal, contact or task (“every Monday: follow up on open offers”). A new trigger reports deals that have been sitting in a stage for X days – existing ones included.	At most 500 records per run (default 100). “Deal sits for X days” is checked once a day; for very old deals the last change counts.
Flows	Improved	“Create deal” sets pipeline, stage, value and owner. Flows keep versions you can restore, long flows collapse, and “Send data (webhook)” can send your own content. “Assign conversations” has its own page; “Notifications” separates team notices from emails to customers.	Versions have no name; the 50 newest are shown. The time field in schedules is too narrow with a 12-hour browser clock (e.g. English/US).
Phone	New	Phone assistant: it asks “What should happen when someone calls?” and sets up the matching phone template from three simple answers – with a preview and a check that warns about gaps (e.g. keys without a greeting, or hanging up instead of voicemail). New: the “Waiting line” template. Guide	—
Phone	Changed	“My phone” and “Setup”: telephony is split – “My phone” for everyone (status, mobile, your calls, headset) and “Setup” for admins. On mobile it is much shorter.	Settings → Phone takes admins to “My phone” too; “Setup” is the next tab at the top. The call-route view is unchanged on mobile. “My recent calls” does not show answered calls whose conversation belongs to someone else.
Phone	Changed	Mobile number only by yourself: the private mobile number for “Mobile rings too” can only be added by the person themselves under “My phone → My status” – voluntary and removable at any time. Admins only see that a number is on file (shortened, e.g. “+43 … 67”) and can remove it, for example when someone leaves the company. Numbers already on file stay and keep ringing. Guide	When an extension is assigned to a different person, the previous person's mobile number is removed (you are asked first). After someone leaves, the number stays until an admin removes it.
Phone	Changed	The “Reception” phone template no longer records by default (you can switch it on when applying); templates you already applied stay as they are. The medical practice template names the ambulance 144 in Austria and 112 elsewhere.	The emergency country is fixed when applying; Switzerland gets 112.
Phone	New	The “Your account's recordings” card shows which announcements your account has already recorded – without your own recording, callers hear the standard English announcement.	Recordings that aren't used in any call route are counted too.
Phone	Fixed	The checklist counts from 1, and the call list stays complete even if the phone system restarts, the connection drops briefly or a call lasts longer than two hours. Recordings are only deleted once they are safely stored.	Calls taken over afterwards (“recovered”) have fewer details, e.g. no voicemail note. Calls that run entirely during an outage and have no recording are still missing.
Web chat	New	Visitors become contacts: everyone who messages you in the web chat automatically gets their own contact – with their name, email or phone number if they share it, so flows like “Create deal” work from the very first message. If the email or number matches an existing contact, you'll see a “Maybe the same person as …” note and can merge both with one click – so nobody ends up on someone else's customer record just by typing their address. Without a name the contact is called “Web chat visitor …”, but automatic messages never address them that way. Guide	Until you merge them there are two contacts with the same address – an email campaign can then arrive twice. The note only shows on the new web chat contact. After merging, the conversation list and header still show the name from the chat. Only unambiguous details are taken over.
Web chat	New	Onto your website: chat link and a QR code to save, guides for WordPress, Wix, Jimdo, Shopify and Squarespace, and a ready-made message for your web designer. The chat page shows your company or brand name in the browser tab instead of “The-Y CRM”; an unavailable chat page says so clearly, without anyone else's name. Guide	The guides per website builder come without guarantee (providers change their menus). The tab icon only shows your own account logo (paid plan).
Brands	New	Email templates without HTML: pick placeholders with a search, insert your logo or your own image with one click, and see the email with a sample contact exactly as it arrives – including sender and subject. “Test email to me” sends it to your own inbox; placeholders that don't exist are highlighted in yellow. Guide	Images only as PNG or JPEG up to 1 MB, no list to delete them yet. Many email programs only show images after a click.
Brands	New	Each brand's page now starts with “Everything about this brand”: sender, frame, channels, members and phone in one place. Set the email sender per brand right there – it applies even without the brand kit switched on.	Without the brand kit, the brand's sender is used for campaigns with a brand, flow emails with this brand's templates and payment reminders – not yet for appointment, booking and survey emails or replies.
Free plan	Changed	“Powered by The-Y” on all public pages: on the free plan, the booking page, customer survey, help center and video appointment also show your company name at the top (instead of “The-Y CRM”) and “Powered by The-Y” at the bottom – just like the web chat. Reminders and notifications to your own team come without that line.	The booking page, video appointment and help center don't show a brand yet, but the account's company name.
Campaigns	Improved	At a steady pace: campaigns go out as fast as your mailbox allows (Microsoft 365 no longer blocks you). If your mailbox slows down, the campaign pauses and continues on its own later, without anyone getting the message twice. “Stop” halts it at any time. Guide	If the server stops exactly while an email is going out, that one email can arrive twice when the campaign continues. A new run after “Stop” goes to the whole segment again.
Campaigns	New	Delivery: “Delivery” shows per campaign what was delivered, read, bounced or failed – with the reason in plain words.	SMS delivery reports are not evaluated yet.
Campaigns	Improved	Bounced emails are matched to the right message. Addresses that don't exist are blocked (visible under “Blocked email addresses” and reversible); a mere delay no longer blocks an address.	—
Account	New	Change address: change your account's address yourself under Settings → Account → “Change address”. The old address forwards automatically: bookmarks, the web chat on your website and appointment, survey and help links you already sent keep working, and nobody else can take the old address. You stay signed in. Guide	At most 3 changes in 24 hours and 10 previous addresses. Emails already sent name the old address (it forwards). A “New password” link that was already open before the change shows “Link invalid” afterwards – open it again from the email.
Accounting	Changed	The exports for your tax advisor, the journal CSV download and the retention package contain your customers' names and addresses – they now also require the “Export contacts” permission. The person who owns the account can always download the package required before resetting the account.	Custom roles with finance permissions but without “Export contacts” no longer see the export buttons. Single invoice PDFs and receipts stay with the finance permissions.
Security	Security	Sign-in, role permissions, account separation, the service PIN and every purchase path are now played through automatically with each update. Found and fixed along the way: when a Founder purchase is refunded or charged back, its license key is now blocked as well.	—

For self-hosters (1.1.53)

Available since 26 October 2026 via :latest, together with the hotfix 1.1.53.1 – automatic updates bring the new version at night. The database gets new tables and columns on start (migrations 0235–0238). They only add. On first start the update builds a search index for messages; installations with very many messages (over 1 million) add it later with one command (shown in the log).
Our own update script instead of Watchtower: new installations (with the current install.sh, on the-y.at since 26 October 2026) update with update.sh: a backup is made first, the new version is checked, and if anything fails the previous version runs again automatically. “Update now” in the app keeps working.
Existing installations keep Watchtower until you switch – about 5 minutes, step by step under Self-hosting operations → Switching from Watchtower to update.sh (also in SELF-HOSTING.md, German). We recommend switching. update.sh and schluessel.sh aren't in the image and therefore don't arrive via automatic updates – download them once from the-y.at into your installation folder: curl -fsSL https://the-y.at/update.sh -o update.sh (likewise https://the-y.at/schluessel.sh). The new backup.sh/restore.sh don't arrive via automatic updates either; you fetch them from the-y.at too: curl -fsSLO https://the-y.at/backup.sh and curl -fsSLO https://the-y.at/restore.sh.
New and optional: store the encryption key protected by a passphrase next to your backups (schluessel.sh) – the passphrase is never stored on the server. Restoring checks that the key matches before changing anything. Instructions
Account address: it can't be changed on self-hosted installations – not needed, you use your own domain.

22 October 2026 — Version 1.1.52: Clearer, more honest, faster – queue with position and callback, mobile rings too, phone templates, brand kit

In short: getting started is easier and more honest – a web chat to test yourself at the top, “Getting started” up to your first reply, and channels show whether they really run. The inbox has a wider reply box and templates with “/”, and settings are grouped and searchable. Queues announce position and waiting time and offer a callback, the mobile can ring along, and Telephony → Templates offers five ready-made call routes. Every brand has a kit for logo, form of address and style. Guide: Set up telephony · known limitations: Known issues.

Area	Type	Change	Known limitation
Getting started	New	Web chat to test yourself: the web chat now sits at the top of the channels page, with “Try it now – message yourself” and “Copy link”. On the free plan the chat shows your company name, with “Powered by The-Y” below.	—
Getting started	Improved	Honest “Getting started”: it leads you to your first answered message (with a little congratulations) and only ticks channels once something really arrives. Sample data no longer counts.	“Test message” also counts replies whose delivery failed afterwards.
Getting started	Improved	Empty inbox: it shows how to connect your first channel or send yourself a test message. A search with no results says so too.	—
Channels	New	Honest status: the channels page shows “Running”, “Setup incomplete” or “Off”. If fetching a mailbox stops working, admins get a notification – and an all-clear once it works again.	The status applies per account, not per brand. SMS counts as “Running” as soon as the access details are entered.
Sign-up	Improved	Sign-up tells you what is still missing before “Create account” works.	—
Inbox	Improved	More room to reply: on laptops the reply box spans the conversation and is three lines tall, with templates, macros and articles in a toolbar above. Insert templates with “/” and their shortcut.	At 1366×768 there is little room for the history. The shortcut list isn’t filtered by brand yet.
Inbox	New	“Assign to me”: new button. The history reads “… took the conversation” or “Automatically assigned to …”.	—
Inbox	Improved	The list shows “Customer waiting” and “?” explains the symbols. An open conversation only loads what’s new, and background tabs stop polling.	The “Closed” and “All” counters update up to 30 seconds later.
Inbox	Changed	Brand per conversation: a mailbox or number can serve several brands; in the inbox you pick the brand per conversation.	A conversation can now only be moved to the brands of its mailbox or number. Add further brands on the channel as “additional brand”.
Settings	Improved	Grouped and searchable: settings are grouped in the same order as the overview, with clearer names (e.g. “Response times” instead of “SLA”, “Brands” instead of “Workspaces”) and a short explanation for each area. Search finds settings by everyday words like “holiday”, “password” or “round robin”.	—
Settings	Improved	“Calls” and your own lists now sit directly in the sidebar. Team permissions are grouped by area and saved with one button.	—
Flows	Improved	Clearer flows: the list describes each flow in words and warns when a step can’t run. “Notify team member” has its own text, recipients (assignee, team, team lead) and a link to the conversation; tasks can go to a fixed person or a role.	—
Flows	Improved	The test run shows whether a conversation would start the flow and who would get the task. “No reply since …” works in minutes, hours, days or working days.	—
Flows	Fixed	Double automatic replies (opening hours and a template) are avoided.	—
Phone	Improved	More honest setup: the checklist starts with the line and only ticks “test call” after a real call. Above “How a call runs”, “Worth checking” lists what’s missing, with a link to fix it. Clearer names: “group call” instead of “ring group”, “If nobody is free” instead of “overflow”, “phone hours”.	The warnings don’t check WhatsApp lines yet. The test call is only detected when the phone system logs calls.
Phone	Improved	The call flow has “Undo”. You create WhatsApp callbacks right in the menu; nothing is saved without a destination. New menus and queues no longer just hang up.	“Undo” covers the last change. Existing menus and queues keep “Hang up” (the warning shows it).
Phone	New	Telephony → Templates: five ready-made call routes (Reception, Trades, Travel agency, Medical practice, Small office) with a “How a call runs” preview and a before/after view. The number is only switched after you confirm and can be switched back. Guide	Queues created from templates don’t automatically get extensions you add later.
Phone	New	Base settings per brand: music, opening hours, language, WhatsApp account, voicemail and logo announcement once per brand under Telephony → Brands – all of the brand’s flows pick up changes automatically. Guide	No logo announcement with “greeting, then hold music” and before a queue’s greeting on entry. “Turkish” from the brand kit has no effect in the phone system.
Phone	New	Queue with position, waiting time and callback: if you like, the queue announces the caller’s position (“You are number 3 …”) and the approximate waiting time. Callers can press a key to get a callback – it shows up as “Callback requested” in the inbox. Guide	Without your own recordings the position is announced with the English standard voice; waiting time and the callback offer need your own recordings. Position only up to 10. With a callback the place in the queue is given up.
Phone	New	Mobile rings too: optionally the mobile rings along with an extension. You accept with 1, so no call ends up on the mobile’s voicemail. Guide	Only over a line of your own; the mobile counts as another simultaneous call. In a group call with keys the mobile only rings if the person is signed in in the browser or on the desk phone.
Phone	Changed	Hold music: new music only becomes the default with its first file (before: right away, even without a file).	—
Phone	Improved	All announcements are your own recordings – no computer voice.	—
Brands	New	Brand kit: every brand has a brand kit: logo, colours, form of address, greeting and sign-off per language, contact and legal details – with an email and WhatsApp preview. Brands can be renamed. Before saving, the brand kit shows what will change. Until you switch the kit on, everything stays as it is.	The sender per brand only works with the brand kit switched on.
Brands	New	Emails in the brand’s style: emails carry the logo, colour and footer of the brand they are sent for – including flow emails using “All brands” templates and booking confirmations. Each brand can have its own sender mailbox. Placeholders like {{begruessung}} use the right form of address automatically.	Booking emails use the default brand for now. Campaigns use the brand’s first language.
Brands	New	New WhatsApp templates, email templates and canned responses start in your brand’s style. A hint shows when a text doesn’t fit the brand’s tone, and the AI writes in the brand’s tone.	The style check is a hint, not a reliable detection. SMS templates don’t have a starting structure yet.
Free plan	Changed	“Powered by The-Y”: on the free plan, emails to customers carry a line at the bottom as before, now “Powered by The-Y” (before: “Powered by The-Y CRM”); with the brand kit it sits below the brand’s footer. The web chat shows your company name with “Powered by The-Y”. With Cloud Pro, a Paid or a Lifetime licence there is no such line.	—
Security	Security	Changing or resetting your password signs you out on all other devices.	—
Security	Security	The data backup in settings also requires the “Export contacts” permission.	—
Account	Improved	Your chosen language stays with your account, also for invited team members and on new devices. New accounts get pipeline and stages in their language.	—
Notifications	Improved	The browser only asks about notifications after you click “Allow notifications”.	—
Web chat	Improved	The web chat on your website only loads once a visitor opens it.	—
Email	Improved	Several mailboxes are fetched at the same time. Attachments that couldn’t be saved during a short outage are loaded automatically later. Several messages from a new customer at once create only one contact and one conversation.	—
Email	Security	Email sending is on a current, secure version.	—
Email	Fixed	In the cloud, the email setup shows the right hint for Microsoft addresses.	—
Campaigns	Fixed	Birthday and date campaigns go out during the day in your account’s time zone; time tracking shows that time zone.	—
Purchase	Fixed	If processing a purchase fails, it is no longer issued as the wrong product – it is processed again automatically, without duplicate licences or emails.	—

For self-hosters (1.1.52)

Available since 26 October 2026 via :latest (together with 1.1.53.1). Automatic updates bring the new version without you doing anything. On start the database gets new tables and columns (migrations 0230–0234). They only add. The phone system is then regenerated once (reload, running calls stay).
One-time steps (not automatic, because they aren’t in the image): the new scripts from selfhost/ (backup.sh, restore.sh, restore-files.sh, restore-test.sh and app-rolle.sh are on the-y.at, e.g. curl -fsSLO https://the-y.at/restore-files.sh; the file docker-compose.backup.yml with curl -fsSL https://the-y.at/compose-backup.yml -o docker-compose.backup.yml), the line COMPOSE_FILE=docker-compose.yml:docker-compose.backup.yml in .env (so that every docker compose … knows the backup service), restricted database permissions like the cloud (database role crm_app with app-rolle.sh: curl -fsSLO https://the-y.at/app-rolle.sh, one command, with a way back) and the backup before every automatic update – since 1.1.53 that comes with switching to update.sh. Instructions in SELF-HOSTING.md (German: “Wiederherstellen”, “Datenbank-Rolle”, “Updates”).
Restoring backups: the script checks the file, requires the app to be stopped and restores everything in one step. New: file restore (restore-files.sh), a weekly test restore (restore-test.sh) and step-by-step instructions. Backups from before 1.1.52 don’t contain database permissions yet.
Microsoft 365 and Outlook.com without your own Microsoft app: sign-in runs via The-Y, mailbox access stays on your server. Available once we enable the service; needs a licence key and an https address without a sub-path. Your own app remains an option.
Phone system: pbx/asterisk/extensions.conf and modules.conf are cleaned up (old sample announcements removed). They don’t arrive via automatic updates either. Current versions: the-y.at/pbx/asterisk/extensions.conf.txt and the-y.at/pbx/asterisk/modules.conf.txt, e.g. in the installation folder curl -fsSL https://the-y.at/pbx/asterisk/extensions.conf.txt -o pbx/asterisk/extensions.conf. Then, without a restart, docker compose exec -T asterisk asterisk -rx "dialplan reload" and docker compose exec -T asterisk asterisk -rx "module unload pbx_ael.so" (running calls stay).
Monitoring: the app’s public status check reports “degraded” (503) if the worker hasn’t reported for more than 5 minutes – monitors will then alert.

20 October 2026 — Version 1.1.51.1: Clearer, louder recordings in the browser

In short: recordings made in the browser now sound much clearer and louder; words are no longer swallowed. Under “How callers hear it” you can listen to exactly the version the phone system plays.

Area	Type	Change	Known limitation
Phone	Fixed	Clearer, louder recordings: When you record in the browser, the app now switches off the browser's call processing (it was swallowing syllables) and records in high quality. On saving, it creates a phone version that is easy to understand and evenly loud; only the silence at the very start and end is trimmed. Under “How callers hear it” you can listen to exactly the version the phone system plays. If a recording is too quiet or too loud, the app warns you while you record. Also applies to uploaded files.	Announcements you already saved stay as they are. Record or upload them again to get the better sound.

For self-hosters: available since 26 October 2026 via :latest, together with 1.1.51 to 1.1.53.1. Automatic updates bring the new version without you doing anything. No further database change, nothing to set up.

20 October 2026 — Version 1.1.51: Real voices instead of a computer voice, ringing during the greeting, hold music per account, service PIN for support

In short: all announcements of your phone system are now real recordings, recorded right in the browser or uploaded. There are no computer voices any more. While the greeting plays, your team's phones already ring, and callers can press a key (e.g. 1 for WhatsApp). Every account has its own hold music. And our support team can only enter your account if you give them a service PIN. Guide: Setting up the phone system · known limitations: Known Issues.

Area	Type	Change	Known limitation
Security	New	Service PIN for support: Our team can only open your account if you create a service PIN under Settings → Account. It is valid for 24 hours, can be revoked at any time, and you see who accessed your account and when. Only admins can create it.	Cloud only (self-hosted installations give our team no access anyway).
Security	New	Emergency access only with a reason: If our team has to get in without a PIN in an emergency, a reason is required. All admins get an email immediately, access ends after 60 minutes and you can end it right away.	—
Security	Improved	Tamper-proof log: The security log can no longer be changed or deleted and is kept when the account is reset. All entries now have readable labels, shown as cards on phones.	—
Privacy	New	Kept for 2 years: Entries in the security log are deleted automatically after 2 years (once a day), as described in the privacy policy.	Cloud only. Self-hosted, you decide (see below).
Sign-up	New	Setup tips only if you want them: When signing up, a note under “Create account” says we send you one email with setup tips. With the box “No setup tips by email” you can refuse it right away. You can also unsubscribe later via the link in the email.	—
Phone	New	Announcements in a real voice: Record announcements right in the browser (microphone, listen, re-record) or upload a file, wherever you pick an announcement: menu, ring group, queue, voicemail, “1 for WhatsApp”, fixed announcements. The app evens out the volume and trims silence at the start and end.	Recording is blocked during an active call (same microphone).
Phone	Changed	No more computer voices: New “text to speech” announcements are gone. Your existing ones keep playing and are marked “Computer voice – please record again”. Where you have no recording yet, callers hear, depending on the announcement, a standard English prompt (e.g. “All circuits are busy now”), a short tone or a moment of silence. Phone → Overview shows which fixed announcements still need your own recording.	The standard English prompts are spoken by Allison Smith (Asterisk Core Sounds, CC BY-SA 3.0).
Phone	New	Warning for recording without a notice: If calls are recorded but you have not recorded your own “This call is being recorded” notice, the app shows a clear warning. Without your own recording callers only hear a tone before the recording.	The notice must be understandable in your callers' language. Please record it yourself.
Phone	New	Ringing during the greeting: A ring group can offer keys (e.g. 1 = WhatsApp call-back, 9 = queue). While the greeting plays, everyone's phone already rings. If someone answers, the greeting stops.	With keys the system answers immediately, so the caller pays from the first second (as with a menu). Single-digit keys only.
Phone	New	Record ring-group calls: A ring group can record its calls. The notice plays before ringing.	—
Phone	New	Log in/out per group: Under “My groups” (presence) you log in or out per ring group or queue, or dial `45` plus the group's short code on the phone (`45` alone = all). Each extension shows “In these groups”.	The group must allow self login/logout.
Phone	Improved	Priority is kept: Member order in queues and in ring groups with keys is kept when saving (it used to be reset).	A higher tier rings when nobody in the lower tier is free, not after a waiting time.
Phone	Fixed	“Do not disturb” now also applies in queues.	—
Phone	New	Hold music per account: Under Phone → Music you upload your own music (confirming you hold the rights) and choose it per queue, ring group, menu (while waiting for a key), number or quietly under an announcement. Only your account hears your music.	Holding during a call plays the account's default music.
Phone	New	Template “Reception”: opening hours → ringing with greeting (1 = WhatsApp, 9 = queue) → voicemail. You record the greeting right in the template. Existing flows stay; the number is only switched after you confirm.	—
Inbox	Fixed	No more false “unhandled” alerts for conversations you started yourself (new chat, flows, templates, WhatsApp call-back): the alert and the SLA first response now count from the customer's first message.	Automatic replies (flows, chatbot) do not count as a response.
Inbox	Fixed	Deleted voicemails stay deleted, also after “Delete contact permanently” and “Reset account”.	—
Inbox	Fixed	No duplicate WhatsApp, Messenger or Instagram messages when Meta delivers a message twice.	—
Email	Fixed	A reply without a connected mailbox is no longer shown as “sent”. If the brand has exactly one mailbox, the app uses it; otherwise it shows “Connect mailbox”.	—
Email	Fixed	A broken email no longer blocks fetching. Emails with only an attachment arrive, and after a mailbox or server move no emails are missing. Mailbox health lists emails that could not be imported.	After a move, at most the last 30 days are re-read.
Email	Fixed	No endless loop from the auto-reply: it is sent as “Re: subject” in the same thread, at most once a day per sender and never to mailing lists or other robots.	—
Webhooks	Improved	Inbound webhooks: match on your own field (e.g. customer number), create and link the company, set a tag, unsubscribe a contact from email (unsubscribe only, never subscribe). Yes/no and number fields are stored correctly.	—

For self-hosters (1.1.51)

Available since 26 October 2026 via :latest (together with 1.1.53.1). Automatic updates bring the new version without you doing anything. The database gets new tables and columns at start-up (migrations 0222–0229). They only add. From then on the security log is tamper-proof and is kept when the account is reset.
Log retention: self-hosted, nothing is deleted automatically. If the worker should delete entries after a period, set AUDIT_RETENTION_DAYS (in days, at least 365; e.g. 730 = 2 years).
Phone system: it is regenerated once after the update (reload, running calls stay).
Announcements: there is no text-to-speech any more. Record your announcements yourself. Without your own recording Asterisk plays the standard English prompts from pbx/asterisk/sounds/en (Asterisk Core Sounds 1.6.1, please keep them installed).
Hold music: run docker compose exec -T app npx tsx src/scripts/pbx-1151-moh-assign.ts --apply once. It moves your existing music into your account.
Service PIN: does not affect you (no outside access).

20 October 2026 — Version 1.1.50: Microsoft 365 with one click, push to your phone (beta), phone announcements in English or as your own recording, more security

In short: you now connect Microsoft 365 and Outlook.com mailboxes with one click, without a password. If you like, you get new messages and missed calls as push notifications on your phone. With 1.1.50 the fixed announcements of the phone system were available in German or English, and each could be replaced with your own recording. Since 1.1.51 all announcements are your own recordings (see above). We also improved the security of the phone system and the connections. Guide: Setting up email · known limitations: Known Issues.

Area	Type	Change	Known limitation
Email	New	Microsoft 365 and Outlook.com with one click: Under Settings → Channels → Email → Set up, choose “Microsoft 365 / Outlook.com” and sign in with Microsoft. No password in the CRM; fetching and sending use a secure sign-in (OAuth). Microsoft no longer allows password sign-in for fetching these mailboxes, and for sending only until the end of 2026.	In many companies a Microsoft 365 admin has to approve the app once. The app then shows a link for your admin. For sending, “Authenticated SMTP” must be allowed for the mailbox.
Email	Improved	Connecting Gmail made easier: The setup explains step by step how to create an app password at Google and which servers to enter.	Google only offers app passwords with 2-Step Verification. Some Google Workspace admins block them.
Notifications	New (beta)	Push to your phone: Under “Security” you switch on push for your device and choose: new message in conversations assigned to you, in unassigned conversations, missed call. By default the lock screen only shows “New message”, no name and no text. With “Show preview” you see the sender and the start of the text. Quiet hours apply here too.	On iPhone and iPad only in the installed app (Safari → Share → “Add to Home Screen”), iOS/iPadOS 16.4 or later.
Phone	New	Phone voice German or English: Under Phone → Overview you chose the language of the fixed announcements (“All lines are busy”, notice before a recording, confirmation after “1 for WhatsApp”), also per number and voice menu.	Replaced by 1.1.51: there are no computer voices any more; fixed announcements are your own recordings.
Phone	New	Your own recordings instead of fixed announcements: Every fixed announcement can be replaced with your own recording, for the whole account or just one number, e.g. in Turkish. Each announcement comes with a sample text to read out (German, English, Turkish). Same formats as other announcements (MP3, WAV, M4A, OGG).	Your own notice before a recording only plays if “Announce before every recording” is switched on.
Phone	Improved	Emergency calls always work: 112, 133, 144 and the other emergency numbers are always dialled via your own line, even when all lines are busy or the account is read-only. Extensions can no longer be emergency numbers.	Emergency calls only via your own line. Register your location with your line provider.
Phone	Security	Better security for the phone system and connections: names, extensions and line servers are checked more strictly. Deactivated members can no longer make calls, effective immediately.	Line servers only as a host name (e.g. sip.zadarma.com) or a public IP; self-hosted, a gateway in your own network also works. A desk phone needs the new password after a member is re-activated (“Connect device”).
Demo	Improved	The live demo is now fully read-only.	—

For self-hosters (1.1.50)

Update: Automatic updates (Watchtower) bring 1.1.50. The database gets new tables and columns at start-up (migrations 0218–0221). They only add; your data stays unchanged. An older version keeps running with the extended database.
Phone system: it is regenerated once after the update (short reload, ongoing calls continue).
Please fetch manually (not delivered by Watchtower): the new backup.sh (checks the backup before old ones are deleted and always keeps the newest 3; curl -fsSLO https://the-y.at/backup.sh) and pbx/asterisk/modules.conf (curl -fsSL https://the-y.at/pbx/asterisk/modules.conf.txt -o pbx/asterisk/modules.conf). See SELF-HOSTING.md (German).
Meta channels: incoming WhatsApp, Messenger and Instagram messages require a valid META_APP_SECRET in the .env; otherwise they are rejected.
English phone voice: without the speech service “piper” (not part of the self-host installation), a simpler computer voice speaks. From 1.1.51 there are no computer voices any more, so it is best to record your announcements yourself right away.
Push: nothing to configure. The keys are created automatically the first time push is switched on.
Microsoft 365: the button appears once your installation has its own app registration at Microsoft (MS_OAUTH_CLIENT_ID, MS_OAUTH_CLIENT_SECRET; guide in SELF-HOSTING.md, German). Without it, the server-and-password route stays.
Terms of use: 1.1.50 does not contain a new version. No dialog appears.

19 October 2026 — Version 1.1.49: Fair rules for new terms of use, Turkish addresses you with “siz” everywhere

In short: if our terms of use ever change in a way that needs your consent, you will know in good time: at least 7 days in advance by email to all admins and with a notice in the app, with the three most important changes. You agree with one click in the app. If you self-host, you decide when you update. Nothing changes in the terms today: the process is built in but switched off, and version 1.6 still applies. The Turkish interface now addresses you politely with “siz” everywhere. Current version: terms of use · known limitations: Known Issues.

Area	Type	Change	Known limitation
Account	New	Status of the terms of use: Under Settings → License you can see which version applies and when and by whom it was agreed to. On the “Terms of use” page you can also expressly agree to the current version.	—
Account	New	How a new version works (hosted accounts): We announce it at least 7 days before the cut-off date (email to all admins, notice in the app with the three main changes) and send a reminder the day before. An admin agrees in the app; the consent applies from the cut-off date. Without consent, the account is read-only from the cut-off date until an admin agrees: logging in, reading, exporting and deleting keep working, new messages and calls still come in, automations and campaigns pause. Nobody has to cancel because of it.	The process is built in but switched off. There is no new version today; version 1.6 still applies.
Cloud Pro	New	Refund: Anyone who does not agree to a new version and cancels for this reason gets the fee for the read-only days refunded pro rata.	We create the credit note manually via Stripe.
Turkish	Changed	“Siz” everywhere: Notices, error messages, emails and settings of the Turkish interface now consistently address you politely with “siz” (previously only the demo pages).	Short buttons such as “Kaydet” stay as usual in Turkish software. Older system notes in a conversation's history stay as they were saved.

For self-hosters (1.1.49)

Update: Automatic updates (Watchtower) bring 1.1.49. The database gets new tables at start-up (migration 0217); this runs automatically. It only adds; your existing data stays unchanged. An older version keeps running with the extended database.
No dialog: 1.1.49 itself does not contain a new version of the terms of use, so no dialog appears. There is nothing for you to do.
New terms of use reach you with an update: If a future version contains a new version of the terms, these notes and the update notice in the app say so. After the update, the app asks your admins once: agree or decline. We never lock your installation remotely. If you decline with a free licence, the app shows you how to stay on the previous version (CRM_TAG and WATCHTOWER_PERIODIC=false in .env). Founder and lifetime licences keep the version they were bought under. The installation reports a consent to the licence server, only with version and checksum, without personal data.

18 October 2026 — Version 1.1.48: Demo in Turkish with a travel agency from Vienna

In short: if you start the demo in Turkish, you now also get Turkish sample data: “Demo Seyahat”, a small independent Turkish travel agency in Vienna. Requests come in via WhatsApp, phone and email, in Turkish and in German, the way it is in Vienna: summer in Antalya with children, flights home, Umrah, a honeymoon, group trips, a passport question and a rebooking. You also get travel requests with travel details, trips with payment status, and invoices. In Turkish, the demo pages now address you politely with “siz”. Try it: demo in Turkish · page for travel agencies in Turkish · known limitations: Known Issues.

Area	Type	Change	Known limitation
Demo	New	Turkish sample data: If you start the demo in Turkish (`?lang=tr`), your own test environment gets a small Turkish travel agency in Vienna: the pipeline “Seyahat talepleri” (travel requests) with travel details on every deal (destination, dates, adults, children with ages, departure airport, board, stars), “Seyahat” records (trips) with payment status, conversations in Turkish and German, tasks, appointments, templates and invoices. The “Sadece görüntüle” (view only) sample company is available in Turkish too.	If you switch the language inside the demo, the sample data stays in the language you started with. Quick replies and reminders of the travel agency pack are still only in German.
Demo → Trips	New	Turkish trip fields that do everything: The booking engine also opens with the right details for Turkish values such as “Her şey dahil” (all inclusive) or “Viyana” (Vienna). The notes on deposit, final payment and the information form also apply to trips with “Paket tur” and “Rezerve”.	Values from the selection lists are recognised. The booking engine leaves other spellings empty.
Demo → Invoices	New	Invoices in German and in Turkish: The sample invoices are in German, as usual for an agency in Austria. Two documents are in Turkish, for a customer who does not speak German. You choose the language per invoice in the “Language” field.	—
Demo	Changed	“Siz” on the demo pages: In Turkish, the demo start page, notes, banner and error messages now address you with “siz”.	Other pages of the Turkish interface will follow later.

For self-hosters (1.1.48)

Now available via :latest. Automatic updates bring the new version without you doing anything. There is no database change.
Demo: the demo without sign-up only exists on crm.the-y.at. Nothing changes for your installation. If you use the travel agency pack, the booking engine and the notes on payment rules now also understand the Turkish values of the demo. Your German values work as before.
Images: the app and worker images now only contain what the two need to run.
Guide: SELF-HOSTING.md and docker-compose.self-host.yml now match install.sh: you create the first admin account with npm run bootstrap (with COMPANY_NAME). Watchtower gets DOCKER_API_VERSION: "1.44" in both self-host compose files so it also runs with new Docker versions. The app applies database changes itself on start; there is nothing to do after an update. Without a licence key the instance runs fully for 14 days from the first start and is read-only after that; with a free key the Free limits apply.
Installed without install.sh? Automatic updates only replace the images, not the compose file. If Watchtower reports “client version … is too old”, add the two lines environment: / DOCKER_API_VERSION: "1.44" to the watchtower service and restart it (docker compose up -d watchtower). Guide: Self-hosting operations → Updates.

18 October 2026 — Version 1.1.47: Demo in English, translating in the demo, tool links in the same tab

In short: if you start the demo in English, you now also get English sample data: conversations via WhatsApp, email and phone, contacts, deals and tasks of a small design studio. “Translate” now works in the demo too. And tool links to systems that want you to sign in again in every new tab (e.g. CosmoNaut) can now always open in the same tab. Guides: Tool links and templates · Simultaneous calls · known limitations: Known Issues.

Area	Type	Change	Known limitation
Demo	New	English sample data: If you start the demo in English, your own test environment gets English sample data: a small design and print studio with customers in the UK, Ireland and the US, conversations via WhatsApp, email, phone and website chat, contacts, deals, tasks, appointments, invoices and templates. The “View only” sample company is available in English too.	In Turkish the demo still starts with German sample data. If you switch the language inside the demo, the sample data stays in the language you started with.
Demo → Inbox	Fixed	“Translate” in the demo: In the “View only” sample company and in your own test environment, “Translate” only showed “Translation failed.” Now the demo translates messages like a real account, using our own translation service.	In the demo at most 2,000 characters per text and 30 translations per minute.
Settings → Tools	New	“Open: in the same tab per system”: Some systems keep your sign-in only in the tab where you signed in. Until now every click opened a new tab and you had to sign in again each time. Now you can set per link that it always uses the same tab. Sign in once in the opened tab. Further clicks use the same tab.	Only switch this on for systems you trust: the opened tab then stays connected to the CRM tab. The default stays “In a new tab”. If you work in two CRM tabs, each one gets its own tool tab.
Tools → CosmoNaut	Fixed	CosmoNaut now also takes the travel dates. The templates “CosmoNaut package holidays” and “CosmoNaut hotel only” send the date as 04.11.2026 and open in the same tab. On the first click you sign in to CosmoNaut. Then press the button again: from then on every search opens in the same tab with the details. Existing CosmoNaut links show “New version of the template available”.	Right after signing in, CosmoNaut shows its default values. Only the second click fills in the details. You choose the destination in CosmoNaut.
Settings → Channels → WhatsApp	Security	Stricter check when connecting: The CRM only accepts the reply of the Meta window from facebook.com itself.	—
Terms of Use (in the app)	Changed	Version 1.6: Cloud Pro now also lists the limit of up to 10 simultaneous calls. For the free key for your own server you accept version 1.6.	—
Telephony → Overview	Changed	“Simultaneous calls” instead of “Concurrent calls” (card and hub), the same wording as on our website. The limit itself does not change.	—

For self-hosters (1.1.47)

Now available via :latest. Automatic updates bring 1.1.47 without you doing anything. On start-up the app adds one database change (a new table for counting demo starts and the option “in the same tab” for tool links; nothing is deleted). When updating by hand: first the app, then the worker.
Demo: the demo without sign-up only exists on crm.the-y.at. Nothing changes for your installation.

18 October 2026 — Version 1.1.46: Templates for your travel systems, offer links recognised automatically, fair phone limits

In short: if you advise customers in a travel agency, you copy travel details from the CRM into the booking engine every day, and offer links back into the CRM. From 1.1.46 you add the buttons for your systems from a template in a few clicks. The booking engine then opens with dates, travellers, departure airport, board and stars from the deal. The inbox recognises offer links by itself and, if you want, attaches them to the deal straight away. On the phone there is now a clear limit for simultaneous calls, and before every recording the caller hears a short notice. Guides: Tool links and templates · Simultaneous calls · Notice before recordings · known limitations: Known Issues.

Area	Type	Change	Known limitation
Settings → Tools	New	"✨ Add from template": a gallery with 22 templates for the systems travel agencies work with: booking engine (IBE), advice and booking, comparison portal, tour operator portals, hotel/flight/car hire/excursions, entry requirements and authorities. Search, category and country (Austria/Germany). Each template shows what it can do: "prefilled" (with travel details), "start page only", "office login needed", "suitable for customers", plus the source with the date it was checked. Before adding, you see a preview with sample data.	Every link opens your own system with your own login. The-Y has no partnership with any of these providers. Only systems whose address parameters are publicly documented are prefilled. For the others, the button opens the start page or you enter the address yourself.
Tools → booking engine (Traffics IBE)	New	Booking engine with travel details: the templates "Booking engine package holidays" and "Booking engine hotel only" open your IBE with dates, adults, children's ages, departure airport, board and stars from the deal. You enter the address of your IBE once. For price comparison at the counter, the same templates exist for CosmoNaut.	At most 4 adults (limit of the IBE). The destination is chosen in the booking engine. CosmoNaut starts the search after your login; please check it once with your account.
Tools → tool link	New	Travel details in the right format: for your own link you pick a conversion before the placeholder: date as 041126, children's ages as a list (4,9) or one by one, airport as code (VIE), board as code (HP), stars as a number. Also new: "Leave out empty parameters". If a value is missing in the deal, the whole parameter is dropped from the address.	Unknown values stay empty.
Tools → templates	New	Take over a new version: if a template changes (for example because a provider changes its address), the link shows "New version of the template available". One click takes it over; name and placement stay.	—
Tools → limit	Changed	Only enabled tool links count. Disabled suggestions (for example from the travel agency pack) take no space. On Free it stays at 15 enabled links.	On Free you cannot enable a link above the limit; disable another one first.
Tools → recognise offer links	New	Offer pages to tick: Traffics IBE, meinereisedaten.com, Paxlounge, Bistro Connect and Traffics IBE with your own address (also Evo NEXT). If you have your own address, just paste one of your offer links. The CRM only reads the address from it.	Recognition only uses the address in the text. The CRM never opens these pages itself.
Inbox	New	Label suggested for you: if a message contains a recognised offer link, "Attach offer to deal" suggests a label right away; for the Traffics IBE, for example, with destination, dates and travellers.	The label only comes from the address, not from the offer page.
Inbox → deal	New	Save sent offer links to the deal automatically (setting, off by default): when someone in the team sends an offer link, it lands on the linked deal. If you want, the CRM also sets the stage, for example "Offer sent". The deal shows where the link came from.	Only for messages from the team and only if the conversation is linked to a deal. If sending fails, nothing is saved.
Telephony → Overview	New	Simultaneous calls: each account now has a limit: 2 simultaneous calls on Free, 10 with Cloud Pro, no plan limit with your own paid licence. Calls over your lines and over WhatsApp count, incoming and outgoing, also while ringing. Internal calls don't count. You choose what callers over the limit hear: the announcement "All lines are busy right now", announcement and voicemail, or busy.	If someone in the team dials out while all lines are busy, they hear the same announcement. If the whole server is at capacity, callers hear "busy".
Telephony → call list	New	"rejected – limit": calls over the limit show up in the call list, in the conversation and for WhatsApp calls with this note. So you see whether you are missing calls.	—
Telephony → recordings	New	Notice before every recording: if a menu key records the call, the caller first hears "This call is being recorded." (in German). This is switched on from the start, also for WhatsApp calls. Instead of the standard text you can use your own text or your own audio file.	Without the notice file, no recording starts. Your own text is read out by the German voice; for English, upload your own audio file. If you switch the notice off, say it yourself in the menu announcement. Not legal advice.
Meta center	New	"Calls" tile per WhatsApp number: shows at a glance whether WhatsApp calls are active or what is missing (for example messaging limit, payment method, Business app). One click takes you to the "WhatsApp calls" card.	—
Settings → Channels	New	Number in another workspace: if your WhatsApp number is connected in another workspace, this is now shown, with "Switch".	—
Settings → Channels → WhatsApp	New	"Call events from Meta are missing" (admins only): if the start and end of WhatsApp calls don't reach the CRM, the "WhatsApp calls" card tells you and how to fix it.	The status is re-read at most once an hour.

For self-hosters (1.1.46)

Now available via :latest. Automatic updates bring 1.1.46 without you doing anything. On start the app adds two database changes (new columns for tool links, offer links and limits; nothing is deleted). When updating by hand: first the app, then the worker.
Simultaneous calls: without a paid key your installation counts as Free, so 2 simultaneous calls. The third call then hears "All lines are busy" (or voicemail or busy, depending on your setting). Way out: PBX_CONCURRENT_FREE in the .env of app and worker (a number, -1 = no limit). With a paid key there is no plan limit.
Limit for the whole server: PBX_MAX_CONCURRENT (default 80, 0 = no server limit). App and worker must see the same number. A new value only takes effect when you recreate both. Without the new ulimits (next point), set 55 at most.
Phone system: not in the image. pjsip.conf (block [webrtc-endpoint]), modules.conf (new) and the ulimits in the compose service asterisk (open files 65536, plus the mount for modules.conf) do not come with the image. Take them over from the release once (current modules.conf: the-y.at/pbx/asterisk/modules.conf.txt), then recreate the Asterisk container once.
Afterwards devices have to register again. Browser softphones do this by themselves within seconds. Desk phones and softphone apps only at their next registration interval (often 1–60 minutes); until then they cannot be reached. Running calls drop when the container is recreated, so best do it at a quiet time.
Notice before recordings: the app creates the standard announcements itself the first time you open Telephony → Overview. Guide: Self-hosting → phone system.

18 October 2026 — Version 1.1.45.1: Fixes for WhatsApp calls

In short: the first live test with real WhatsApp calls turned up two bugs. Both are fixed.

Area	Type	Change	Known limitation
Phone (WhatsApp)	Fixed	WhatsApp calls dropped after about 2 seconds. Meta expects the phone system to confirm the audio formats in the same order Meta offers them. The order is now correct and calls stay connected.	—
Softphone	Fixed	Ringing continued after answering. In some cases the ringtone started twice and only one stopped when you answered. Now there is never more than one ringtone, and it stops when you answer.	Reload once (Ctrl+F5) so the browser loads the new version.

For self-hosters: automatic updates (Watchtower) bring 1.1.45.1. No database change, nothing to set up.

18 October 2026 — Version 1.1.45: WhatsApp calls in your phone system

In short: many customers would rather tap the phone icon in WhatsApp than type. Until now these calls rang on some phone and nobody in the team knew. From 1.1.45, WhatsApp calls arrive in your phone system like any other call: menu, group, queue, voicemail. The call appears right in the contact's WhatsApp conversation. You can also call back with one click via WhatsApp, if the customer has allowed it. Incoming WhatsApp calls are free at Meta. Guide: Set up WhatsApp calls · known limitations: Known Issues.

Area	Type	Change	Known limitation
Telephony (WhatsApp)	New	WhatsApp calls in your phone system: when someone taps the call button for your number in WhatsApp, it rings in your browser and on your desk phone, like any other call. The phone system answers right away. After that, everything you have already set up applies: menu, ring group, queue, opening hours, voicemail. The softphone shows "WhatsApp call" with the contact's name. Hold, park and internal transfer work as usual. Incoming WhatsApp calls cost nothing at Meta.	Meta sets conditions no provider can get around: the number must not also run in the WhatsApp Business app (otherwise it keeps ringing only on the phone). The messaging limit at Meta must be at least 2,000 (new numbers start at 250). A payment method must be on the WhatsApp account, even for free incoming calls. Customers can only call from WhatsApp on a phone, not from WhatsApp Web or a computer. It can take Meta up to 7 days until everyone sees the call button.
Telephony (WhatsApp)	New	Never into the phone network: Meta forbids forwarding a WhatsApp call to the telephone or mobile network. The phone system blocks this everywhere: if your flow leads deeper to an external number (e.g. menu key → mobile, overflow, fallback), a short announcement plays and then the fallback destination (default: the first voicemail box). The softphone does not offer external numbers as a transfer target for WhatsApp calls. Phone calls are unchanged.	This also applies when the same call passes several steps. Attempts are recorded in the security log.
Telephony → Numbers	New	"WhatsApp numbers" block: per WhatsApp number you choose where a call starts (menu, group, queue, extension, opening hours, announcement, voicemail; "Automatic" = like your top phone number) and which fallback applies instead of forwarding outside. The flow view shows blocked forwarding in red with the fallback.	"External" cannot be chosen as the start destination.
Inbox (WhatsApp)	New	The call appears in the WhatsApp conversation: every WhatsApp call is a line in the conversation with the contact, just like in the WhatsApp app. The line shows the result: answered with duration, missed, voicemail left, hung up in the menu, not reached. Voicemail messages are added as audio, a recording as an attachment. A missed call notifies the assigned person, otherwise the team. When someone calls, the 24-hour window is open: you can write right away. "Press 1 for WhatsApp" sends WhatsApp callers a normal message instead of a template.	For callers with a hidden number, the WhatsApp username is shown. The CRM never shows the hidden number as a phone number.
Settings → Channels → WhatsApp	New	"WhatsApp calls" card: shows in plain words whether calls work and what is missing otherwise: "Active", "Possible, not turned on yet", "Not possible: the number also runs in the WhatsApp Business app", "Messaging limit below 2,000", "Payment method at Meta is missing", "Not possible: another provider handles calls at Meta", "Blocked by Meta until …". Plus three switches: "Accept calls", "Show call button in WhatsApp" and "Allow outgoing WhatsApp calls" (with a cost note). Also "Check", direct links to WhatsApp Manager and billing at Meta, and the section "What Meta requires".	Admins only. The CRM cannot read whether a payment method is set up at Meta; it tells you as soon as Meta rejects a call because of it. Best leave call hours at Meta off: outside them nobody can call. The phone system's opening hours handle this better (voicemail answers).
WhatsApp conversation, contact, call list	New	Call back via WhatsApp: button "WhatsApp call" → your own phone rings first; when you answer, the phone system calls the customer via WhatsApp. Only works if the customer has allowed calls. Anyone who calls you automatically allows a callback for 7 days. Otherwise: "Ask for call permission" sends "May we call you via WhatsApp?" – as a normal message within the open 24-hour window, otherwise as a template. The answer (temporary 7 days, permanent or declined) appears as a note in the conversation and on the button.	Costs at Meta: outgoing €0.0085 per minute to Austria and Germany, billed in 6-second steps (Meta's price list from 1 Oct 2026). A request via template costs like a utility template. Meta allows at most 1 request per 24 hours and 2 per 7 days to the same customer. After 4 unanswered calls in a row WhatsApp revokes the permission; the CRM warns from the 2nd. You need your own extension. On the first call the customer may only see the number instead of the company name.
WhatsApp templates	New	Template "May we call you?" – submit it to Meta with one click (card "WhatsApp calls"). It is needed when the 24-hour window is closed. Status in plain words: in review, approved, rejected (submit again).	Meta reviews it like any other template.
Call list, reports, wallboard	New	"WhatsApp" badge, filter "Via WhatsApp", report tile "Via WhatsApp (calls · time)", badge on the wallboard. The cost overview includes outgoing WhatsApp calls at Meta's list price.	Costs are an estimate based on the list price; billing happens at Meta.
Free	Changed	WhatsApp calls count towards the 200 call minutes per month like phone calls – so WhatsApp calls are available in Free too.	—
Flows	New	Condition "Network: phone / WhatsApp" for the triggers "Call ended" and "Key pressed in voice menu" – e.g. to create a task after a missed WhatsApp call.	—
Notices for admins	New	Notifications in the CRM when Meta reports something about your calls: too many unanswered calls (Meta then hides the call button), calls blocked because of blocking/reporting, payment method missing, "WhatsApp calls do not reach the phone system".	A voicemail box as the last destination helps against unanswered calls – then the phone system always answers.
Inbox	Fixed	While loading, the inbox briefly showed all tickets instead of only the open ones. The first list is now already filtered to "Open", and the counters are right immediately. The ticket that opens automatically as a tab is therefore always an open one (before, sometimes a closed one).	—
Flows	New	"Create task" for the person assigned to the conversation: new choice "Who gets the task?" with "Contact owner" (as before) or "Person assigned to the conversation". If nobody is assigned to the conversation, the task goes to the contact owner or the fallback as before. Existing flows stay unchanged.	—
Flows (AI)	Fixed	"✨ From a sentence" mixed up who is waiting: "Customer has been waiting 2 hours for a reply" sometimes became "We are waiting for the customer". The AI now gets a clear explanation of "customer is waiting for us" and "we are waiting for the customer".	Check the suggestion before turning it on, as always.
AI (OpenAI)	Changed	OpenAI no longer stores your requests: all calls to OpenAI are sent with "do not store" (`store: false`), so they do not show up in the stored responses of your OpenAI account.	Under its own rules, OpenAI may keep requests for up to 30 days for abuse monitoring.
Settings → Channels → WhatsApp	Fixed	Marketing messages via Meta's Marketing Messages API: after accepting the terms, the card showed in red "Meta doesn't offer the Marketing Messages API for this account (yet)". It now shows in yellow "Being set up at Meta (terms accepted)".	—
Industry pack travel agency	Fixed	Sample messages all had "today 09:00": the reply appeared before the request, and before 9 am messages were in the future. Order and times are now right (request last evening, reply this morning), and no message is in the future.	Applies to newly created sample data.
Deals, contacts, companies	Fixed	"Created" on the deal, contact and company pages was shown in UTC (2 hours early), as were "Closed" on deals and the conversation dates on contacts. They now use the time zone from Settings → Account.	—
Settings → Channels	Changed	The notice box above the buttons for connecting WhatsApp and Facebook/Instagram is gone.	—

For self-hosters (1.1.45)

Without setup nothing changes. Automatic updates (Watchtower) bring 1.1.45; on start the app adds three database changes (two new tables, new columns in the call list; nothing is deleted). WhatsApp calls stay off; the card then shows "This installation is not set up for WhatsApp calls".
For WhatsApp calls you need (guide "Set up WhatsApp calls"):
- a public name for the phone system, e.g. sip.your-domain.tld, with a valid certificate from a public certificate authority (e.g. Let's Encrypt). Meta checks the certificate; if it is invalid or expired, Meta drops every call immediately.
- in the .env of app and worker: PBX_WA_SIP_HOST (the name) and optionally PBX_WA_SIP_PORT (default 5071); paths to certificate and key inside the Asterisk container PBX_WA_TLS_CERT/PBX_WA_TLS_KEY (default /etc/asterisk/certs/wa-sip.crt / .key); PBX_WA_PUBLIC_ADDR only behind NAT.
- the certificate read-only in the Asterisk container (folder pbx/asterisk/certs), renewed regularly; Asterisk 22.5 or later with res_srtp.
- in the firewall, port 5071/tcp only for Meta's IP ranges and the RTP range 10000–20000/udp (also in rtp.conf). Meta's IP ranges belong in fail2ban's ignoreip, otherwise fail2ban blocks Meta.
- the AMI account with write = system,call,originate (for callbacks).
With your own Meta app: after the update, click "Subscribe webhooks" once in the hub under Meta (new notifications: calls – call started/ended – and account_settings_update – call settings). For calls through the phone system your Meta app must be in "Live" mode.
When updating by hand: first the app (it updates the database), then the worker.

17 October 2026 — Version 1.1.44: WhatsApp, Messenger and Instagram ready for Meta's changes in 2027

In short: Meta is changing a lot in 2027. On 21 Jan 2027 Meta switches off the old technology the CRM used, among other things, to send WhatsApp messages. Marketing templates will soon only go through Meta's Marketing Messages API. And since autumn 2026, Meta's AI agent can run conversations on your number by itself. With 1.1.44 your inbox simply keeps working: the CRM uses Meta's current interface, routes marketing templates correctly after one click at Meta, and shows you when someone else is currently running a conversation – instead of messages silently going missing. Guides: Marketing messages via Meta's Marketing Messages API · Meta's AI agent and conversation routing.

Area	Type	Change	Known limitation
WhatsApp, Messenger, Instagram	Changed	Meta's current interface: sending and receiving, images and files, templates, connecting a number and a Facebook Page – everything now runs on the current version of Meta's interface (version 26.0). Meta switches off the old version, which mainly handled sending so far, on 21 Jan 2027. Everything keeps working for you without any action.	No action needed.
WhatsApp marketing templates	New	Marketing templates via Meta's Marketing Messages API: from 13 Oct 2027 Meta only accepts marketing templates through its Marketing Messages API; WhatsApp accounts that are added from 13 Apr 2027 already from then on. New card under Settings → Channels → WhatsApp: sign-up status with a traffic light and the deadline, "Turn on at Meta" (opens WhatsApp Manager with your account) with 3-step instructions, and "Check now". At Meta it is one click: "Accept terms". After that the CRM automatically sends marketing templates through the Marketing Messages API – from campaigns, flows and the inbox. Utility and service templates work as before. As soon as Meta reports the sign-up, the admins get a notification in the CRM. Optional: "Marketing only through the Marketing Messages API".	Only someone with full control of your Meta business portfolio can make the click at Meta – otherwise send the instructions to that person. Meta charges marketing messages per delivery as before; the cost overview in the CRM remains an estimate based on Meta's list price. For the CRM, "added" means the day the number was connected in the CRM.
WhatsApp marketing templates	New	Switch "Share read and click data with Meta" on the same card, off by default: Meta then does not use the read and click events of your marketing messages for optimisation. When switched on, Meta uses delivery, read and click events to deliver your marketing messages better. The CRM sends your choice explicitly with every marketing message.	Applies per WhatsApp number and only to marketing messages sent through the Marketing Messages API.
Campaigns	New	Sending route at a glance: every WhatsApp campaign shows how it is sent: "via Meta's Marketing Messages API", "Transition: as before until 13 Oct 2027" or "Sign-up at Meta needed". In the last case the campaign sends nothing and a button takes you to the WhatsApp settings. For a newly created marketing template you see "New template: Meta syncs for up to 10 min". In the statistics: "N of them via Meta's Marketing Messages API".	Meta reports the route actually taken with the delivery status – also when Meta itself falls back to the previous route.
Consent	New	"Stop marketing messages" in WhatsApp takes effect in the CRM: if someone taps "Stop marketing messages" in WhatsApp, the CRM removes the marketing consent for WhatsApp and notes it on the contact (source "WhatsApp marketing setting"). Service replies stay possible. "Resume promotions" only adds a note – for marketing you still need explicit consent. No flow and no automatic reply is started.	Only works for contacts the CRM finds by number or WhatsApp ID; no new contact is created.
Inbox (WhatsApp)	New	Recognising Meta's AI agent: if you switch on Meta's AI agent or another responder for your number at Meta, Meta assigns every conversation to exactly one responder. When someone else is running a conversation (e.g. Meta's AI agent), you now see it: a banner above the reply box ("This conversation is currently handled by Meta's AI agent"), messages appear as observed (dashed grey border + "observed"; the other responder's replies show "Meta's AI agent" or "Other responder" as sender), and the conversation list shows "🤖 Meta AI" or "handled elsewhere". Free text is then blocked – instead of your reply failing at Meta –, templates can still be sent.	Observing only works if you allow it at Meta – otherwise nothing from these conversations reaches the CRM. Meta does not continuously report who runs a conversation; the CRM derives it from Meta's notifications. If the status is briefly off, it corrects itself with Meta's next notification or your next reply.
Inbox (WhatsApp)	New	Take over, hand back, release: if The-Y CRM is set as escalation partner at Meta, you take over with "Take over conversation" (or simply with your next reply). Otherwise the banner shows how to set this up at Meta. While you handle the conversation, you can choose "Back to Meta's AI agent" or "Release conversation". When Meta hands a conversation to you, it opens like a new request, the team is notified, and a summary sent by Meta appears as an internal note. Every takeover and handover is shown in the history. Conversations run by someone else get no SLA reminders and no escalations; observed messages do not start flows, automatic replies or notifications.	"Back to Meta's AI agent" only works if the AI agent is switched on for the number. Taking over and releasing requires the right to reply in the conversation and is recorded in the security log. Meta bills its AI agent directly to you based on usage; The-Y CRM charges nothing for it.
Channels (WhatsApp)	New	Card "Conversation routing at Meta": appears as soon as several responders are set up for your number. It shows The-Y CRM's roles in plain words (e.g. "Primary responder for customer messages", "Escalation partner") and whether observing is allowed. A red warning if customer messages go to another responder and you are not observing (then nothing arrives in the inbox), a yellow warning if you cannot take over conversations yourself – each with 4-step instructions, a link to Meta Business Suite and "Check".	Routing can only be set up in Meta Business Suite. Escalation and observing only appear there after you have accepted the terms for Meta Business Agents.
Messenger, Instagram	New	Observing Messenger and Instagram too: when the Meta Business Suite inbox, Meta's AI or another application runs a conversation, the messages arrive in the CRM as "observed" instead of getting lost. Taking over and releasing work through the same banner. After the update the CRM itself signs up connected Facebook Pages for the new notifications.	Images and attachments in observed Messenger/Instagram messages appear as placeholders. Whether you can take over a conversation depends on which application is set as the default for your Page at Meta.
Error messages	Changed	New Meta messages as a sentence with the next step, e.g. "This marketing template only goes through Meta's Marketing Messages API", "Meta is still syncing this new marketing template" or "Another program is currently running this conversation". For "not delivered" the CRM then shows "Send template" (someone else runs the conversation) or, for admins, "Set up marketing messages →" instead of "Send again".	—

For self-hosters (1.1.44)

No change to the compose file needed. Automatic updates (Watchtower) bring 1.1.44 completely; the app adds two database changes on start (new columns only, nothing is deleted).
Optional META_GRAPH_VERSION (default v26.0, allowed v22.0–v29.0): if there are problems with Meta, set it to v25.0 and restart – no new update needed. The hub shows the active version and Meta's shutdown date under Meta.
With your own Meta app: after the update, click "Subscribe webhooks" once in the hub under Meta (new notifications for observing, handovers and "stop promotions"). If Meta rejects a field, the hub names it; the others stay subscribed. The worker signs up connected Facebook Pages for the new notifications by itself three minutes after start (and again on "Subscribe webhooks").
For the Marketing Messages API, your Meta app itself must be signed up for it at Meta (App Dashboard → WhatsApp → Quickstart → "Marketing Messages API" → accept the terms); you sign up the WhatsApp accounts themselves via the new card as described above.

17 October 2026 — Version 1.1.43: CRM with AI assistance

In short: AI takes over the places where you lose the most time – WhatsApp templates that Meta accepts, flows you don't have to click together, and booking confirmations you no longer type in by hand. Nothing goes to customers automatically unless you approved it. Everything runs on your own AI key (Anthropic, OpenAI or Google); The-Y charges nothing for it.

Area	Type	Change	Known limitation
WhatsApp templates	New	"✨ Create with AI": describe in one sentence what the message should do (e.g. "Remind customers of their appointment one day before, with a button to cancel"), choose language, form of address and category – and you get a finished draft in the familiar template builder. A box shows why the AI suggests the category, what is still open (e.g. "add the link to the cancellation page") and tips. Before you submit, the CRM also checks the most common rejection reasons: requests for sensitive data (card, account, ID numbers), threatening tone, duplicate template, template quota almost full.	Templates are only submitted when you click "Submit". Meta decides on approval; our check is an estimate.
WhatsApp templates	New	"✨ Translate": copy an approved template into more languages – up to 10 languages in one go. Variables, buttons and structure are guaranteed to stay the same; the form of address fits the language. You check each language and submit the ones you pick. You see the quota ("x of 250 used") while doing so.	Each language is a separate template at Meta and is reviewed on its own. Quick-reply button texts differ per language – flows that check the button text then only match one language. An image or video header is uploaded again when submitting.
WhatsApp templates	New	Rejected template: "✨ Explain and suggest a fix": the rejection reason in plain words, what was changed (old ↔ new), and one click takes the fix into the builder or creates a new template. If the template follows the rules, you see how to request another review from Meta.	Not for code templates (sign-in codes), whose text Meta defines.
WhatsApp templates	New	Utility or marketing? Before you submit a utility template, the AI estimates whether Meta will likely classify it as marketing – with the phrases that sound like it and what that costs per message (Austria and Germany, prices from 1 Oct 2026). You choose: "Use the Utility version", "Submit as Marketing" or "Submit as Utility anyway". Approved utility templates get "Check category".	Only an estimate, Meta decides. Without an AI key a simple word check warns you.
Automations	New	"✨ From one sentence": describe what should happen automatically ("When a customer writes on WhatsApp and we don't reply within 2 hours, the assignee gets a task"). You see how the AI understood you, the flow in words, assumptions, open questions, what isn't possible (yet) and whether the flow would send messages. Then open it in the builder, save it as a draft or start a test run right away. If the flow replies automatically, the CRM adds a path to a human.	New flows are always switched off – you switch them on when everything fits. The AI only uses building blocks that exist in the builder.
Automations	New	AI step in flows: "AI: classify message" (2–8 categories of your own, one branch each) and "AI: extract data" (up to 8 fields on the contact, deal or record, e.g. destination or preferred date; fill empty fields only or overwrite). If the AI is unsure, the key is missing or the limit is reached, the flow continues in the "AI unsure" branch – a human takes over there. The builder shows the approximate cost per 1,000 runs; the test run can assume a result or really ask the AI.	The AI step sends nothing itself and only takes values that literally appear in the message – never passport, ID or card numbers, dates of birth or health information. It runs in the background (a few seconds' delay), at most 2 at a time per account.
Trips / records	New	Booking confirmation → trip: in the inbox, PDF and image attachments get "✨ Use as Trip", emails without an attachment get "✨ Use text as Trip"; under Records → Trips there is "✨ Create from confirmation" (upload a file or paste text). The AI reads any layout without fixed patterns. You see the document on the left and the filled-in form on the right – the source for every field, uncertain values in yellow "please check". The customer is suggested by email, phone or name (never guessed), and an existing trip with the same booking number is updated instead of created twice. Notes on payment rules and data protection are shown alongside. Works for every record type of your own, not only trips.	Nothing is saved until you click "Save Trip". Passport/ID numbers are never taken over, health information is never pre-filled. PDF up to 10 MB and 10 pages, text up to 20,000 characters; protected PDFs don't work. Your AI model must be able to read PDFs, otherwise paste the text.
AI settings	New	"Your AI provider's data protection": for Anthropic, OpenAI and Google you see what the provider commits to regarding training and what you need to set. For Google there is the checkbox "My Google project has billing enabled (paid tier)" – without it the CRM sends no content from WhatsApp, Messenger and Instagram to Google (this also applies to translating, reply suggestions, summaries and classification in the inbox). Plus counters "AI steps this month" and "Documents read this month".	The checkbox belongs to the key: new Google key → confirm again.
AI buttons	Changed	All new AI buttons are always visible. Without a key, a click explains "Add your AI key" (with a link to the settings or "Please ask an admin"); likewise when AI is switched off, the monthly cap or the Free limit is reached. Provider errors appear as a clear message ("Your AI provider isn't responding right now", "rejected the key" …).	—
Limits	New	Free limits: 1,000 AI steps in flows and 300 extracted booking confirmations per month (documents that don't look like a trip don't count). Template AI and "From one sentence" have no monthly limit, only a brake against abuse. Cloud Pro and your own server with a paid licence: unlimited.	The limits protect our server; you pay the AI costs directly to your provider.
Log & data	New	Every AI suggestion is logged: who requested it and who took it over (unchanged or edited) or discarded it – visible in the settings under the security log (🛡). The content of a suggestion is cleared automatically after 90 days, immediately when a contact is permanently deleted. New as CSV under Settings → Data backup: "AI suggestions". The cost view in Reports shows the new AI functions by name.	—

For self-hosters (1.1.43)

No change to the compose file needed. Automatic updates (Watchtower) bring 1.1.43 completely; the app creates the new database table (ai_suggestions) itself on start.
The AI functions need your own AI key (Settings → AI). Free limits as in the cloud; unlimited with a paid licence. Optionally adjustable: AI_FLOW_STEPS_FREE, AI_EXTRACTS_FREE (number, -1 = unlimited).
The AI step in flows runs in the worker container (like all flows).

17 October 2026 — Version 1.1.42

Area	Type	Change	Known limitation
Industry packs	New	"Travel agency" pack: if you handle travel enquiries, options and bookings, the pack sets up everything you need in one click: a "Travel enquiries" pipeline with matching stages, fields on the enquiry (destination, dates, travellers, departure airport, budget, "option valid until" …), the "Trip" record (booking number, tour operator, payments, documents …), labels, quick replies, 10 draft templates for WhatsApp and reminder flows (option expiring, deposit, balance, documents, departure). Choose it when you sign up or later under Settings → Industry pack, optionally with sample data. Applying it twice creates no duplicates, and your own content stays unchanged.	Austria and Germany. All flows start switched off – you check them and switch them on. You open the draft templates in the template builder and submit them yourself as usual. Sample data can be deleted with one click.
Trips	New	Create trip from deal: one click on the deal copies destination, dates, travellers, departure airport, trip type and "option valid until" into a new trip and links deal, trip and contact. When the deal is in "Booked", the button is highlighted. A trip shows the 8 most important fields first, the rest is under "More details".	You check the values in the form and save yourself.
Trips	New	Notes on payment rules for package holidays (Austria: Package Travel Act/Ordinance, Germany: BGB/EGBGB): e.g. deposit above 20 %, balance due too early, information form missing, totals don't add up. When saving you see a note with the source under "Why?". Nothing is ever blocked. With direct collection (the customer pays the tour operator directly) there are no payment notes.	Notes only, not legal advice. Applies to package holidays only; flight-only, hotel-only or car hire get no payment notes.
Automations	New	Date as a trigger: flows start on a date on the record or on the deal, with an offset in days and a time (e.g. "3 days before departure", "1 day before the option expires"). In texts you can use its values, e.g. `{{reise.abreise\|datum}}`, `{{deal.custom.reise_budget\|eur}}`, `{{reise.abreise\|tage_bis}}`. New action "Set field on record" (e.g. status "back"). Before sending a payment reminder, a flow can check the payment rules – if something doesn't fit, it doesn't send and creates a task instead. The test run shows "would not send because …".	Date triggers run once a day at the time you set.
Marketing	New	Campaign on a date on the record, e.g. asking for a review 7 days after the return trip – to all travellers, not only happy ones, and only once per trip.	As always, marketing only goes to contacts who gave consent.
Tools	New	Tool links: add links to the pages you open all the time (booking engine, tour operator portal, insurance …) and let values be filled in – name, email, phone, deal fields or e.g. the trip's booking number. The links appear on the contact and deal page, in the trip dialog and in the inbox. "Into chat" puts the finished link into your reply without sending it. Settings → 🧰 Tools.	Free: up to 15 links. Only http/https addresses. We have no partnership with any provider – you add what you use.
Import	New	CSV import with matching: contacts (by email or e.g. customer number), companies, deals and trips (e.g. by booking number) are updated instead of created twice. A dry run first shows "new", "updated", "unchanged" or "skipped" with a reason for each row; afterwards you get a report (also as CSV). Dates like 05.11.2026 and amounts like 1.920,00 are recognised.	The dry run changes nothing and starts no flows. New running trips count towards the Free limit.
Deals	New	Offer links: enter the addresses of your tour operators or portals. When you or your customer send such a link in the inbox, you attach it to the deal with one click – optionally moving the deal to another stage. The deal page lists all offers.	Only addresses you enter are recognised.
Pipelines	New	Manage pipelines yourself: create, rename, reorder and add stages, set the default pipeline, delete empty pipelines. Settings → Pipelines.	Stages that contain deals (including the bin) can't be deleted.
Sign-up	Changed	When signing up you can optionally choose an industry (default: none), plus country and "Where do your customers usually pay?". With the pack, customers are addressed formally ("Sie") in German (unsubscribe notice, online booking, web chat) – switchable under Settings → Industry pack.	—
Inbox	Changed	Translation on our own server: the 🌐 button and "Translate reply" now use a translation service on our own server. The text no longer goes to any outside service (previously a free online service). Below the translation you see what translated it. If you prefer, choose your own AI or DeepL key under Settings → AI → Translation. For WhatsApp, Messenger and Instagram we never use a free DeepL key.	On our server: German, English, Turkish (short message about 0.5–1.5 s). For other languages use your own AI key; Croatian, Serbian and Bosnian are not available on our server.
Limits	New	New limits on the Free plan: 300 running trips (finished trips don't count), 15 reminder flows from the pack in addition to your 5 flows, 15 tool links. All visible under Settings → Usage. Cloud Pro and your own server: unlimited.	Above the limit you can't add more; what exists stays.
Status	Fix	The status page the-y.at/status shows the real state of the app again (previously always "Status unknown").	—

For self-hosters (1.1.42)

Translation is an optional service (translate, profile translate): it uses up to 0.9 GB RAM (hard limit 1.5 GB) and once ~0.6 GB disk for the language models (plus ~0.6 GB for the image). It runs in its own Docker network without internet access.
Automatic updates only replace the images, not the compose file. Installations from before 1.1.42 therefore don't have the service yet. The app keeps running normally; translating immediately says "Translation is not set up on this server", and Settings → AI → Translation shows the steps. New installations already have the services in their compose file.
To switch it on:
1. Extend the compose file: services translate + translate-models, network translate-internal, TRANSLATE_URL for app and worker (template: docker-compose.self-host.yml, guide with all blocks: Self-hosting operations → Translation).
2. Add to .env: COMPOSE_PROFILES=translate (languages optional: TRANSLATE_LANGS=de,en,tr).
3. Download the language models once (about 1 minute, needs internet): docker compose --profile translate-models run --rm translate-models
4. Start: docker compose up -d translate app worker
Without the service you can use your own AI or DeepL key. MYMEMORY_EMAIL is no longer used.
Health check /api/public/health now only returns {"ok":true} or {"ok":false} (HTTP 200/503). If your monitor checks for a word in the body, switch it to the HTTP status. The version is available at /api/public/version.

16 October 2026 — Version 1.1.41

Area	Type	Change	Known limitation
Automations	New	Automations 2.0 – the flow builder: build flows step by step from top to bottom: trigger → if/then/else (AND/OR, up to 3 levels) → actions → wait → stop. Each action can have its own path for “sent”, “no consent”, “window closed” or “error”. Settings → Automation → “New flow”. Your existing rules keep running unchanged and can also be opened in the builder. Guide	On a phone, “then” and “else” are shown one below the other.
Automations	New	Test run: try a flow on a real conversation, contact or deal. You see what it would do and what not (with the reason) – nothing is sent, changed or saved.	The test run assumes the data does not change along the way.
Automations	New	Template gallery with ready-made flows, e.g. “Missed call → WhatsApp, SMS or callback”, “No reply after 2 hours → reminder”, “Deal won → thank you”, “Bad rating → task”. Every template is created switched off – you check it and switch it on.	“Appointment tomorrow” and “Invoice overdue” are not available yet.
Automations	New	Many new triggers: conversation closed, reopened or assigned, label added/removed, no reply for X minutes (optionally business hours only), tag added/removed, deal created, stage changed or lost, task due/overdue, response time (SLA) about to expire or breached, rating received, fixed schedule, date on the contact (e.g. birthday).	Time-based triggers are checked every minute.
Automations	New	Phone triggers: “Call ended” – optionally only for one result (answered, missed, voicemail message, hung up in the menu, not reached) and one direction. “Key pressed in the phone menu” – in any or one specific menu, any or one specific key. In texts you can use `{{call.number}}`, `{{call.time}}`, `{{call.outcome}}`, `{{call.duration}}`, `{{ivr.key}}`.	When a key is pressed, the call is still running – there is usually no conversation yet, so only contact actions work there (e.g. WhatsApp template, task, notification). Requires the built-in phone system.
Automations	New	New actions: reply in the conversation (same channel), WhatsApp template with variables, language, sender number and fallback template (e.g. when the name is missing), remove label/tag, clear or count up a field, assign round-robin or to the least busy person (optionally only people who are present), set deal stage/field, close with or without survey, snooze, task with due date (“tomorrow 9 am”, “next working day”) and type (e.g. callback), stop other flows.	A separate path per button of a WhatsApp template will follow later.
Automations	New	Log per flow: every run with all steps, checked values and the reason. Waiting runs are shown with their time. Temporary errors (e.g. provider briefly unreachable) are retried after 1 minute, 10 minutes and 1 hour. If a flow fails 10 times in a row, it is paused and you get a notification.	—
Automations	New	Limits: Free: 5 active flows with up to 20 steps each, waits up to 30 days, 500 runs per hour, log 30 days. Each automation pack adds +5 active flows on Free (and more runs per hour). Paid plans and Cloud Pro: unlimited flows, 5,000 runs per hour, log 90 days.	Existing rules stay active; above the limit you just can't switch on more.
Automations	Changed	Strict consent for marketing: marketing via WhatsApp or SMS only goes to contacts with explicit consent (“yes”). If a caller presses “1 for WhatsApp” on the phone, that only covers the requested callback – not marketing. WhatsApp templates in the “Marketing” category always count as marketing.	Please check SMS actions: SMS without a chosen purpose now count as marketing. For service messages (e.g. appointment confirmation) choose “Purpose: service”.
Automations	Changed	Unsubscribed, but service replies: if someone unsubscribed from your newsletter or marketing, they still get automatic service replies in a conversation they started themselves (e.g. an acknowledgement of receipt). Marketing stays blocked.	Applies to email. If someone opted out of SMS or WhatsApp, they still get nothing there.
Automations	Changed	Several rules for the same event now run one after the other, rule by rule. While a run of a rule is waiting for the same conversation or contact, the same rule doesn't start a second time there.	—
Phone	Fix	One call = one conversation: softphone, missed call, voicemail message and “1 for WhatsApp” end up in the same conversation – no matter what comes first. The WhatsApp or SMS callback has its own conversation; both link to each other with “Open linked conversation”.	Duplicate conversations from before this update stay. Please reload the app in your browser once (Ctrl+F5) so the softphone sends the call ID.
Phone	Fix	Honest announcement after “1 for WhatsApp”: instead of “We have just sent you a WhatsApp message”, the announcement now says “Thank you! We will get back to you shortly.” – always true, even if no message goes out (yet). The flow editor and the “Trades” template show whether a WhatsApp or SMS really goes out after key 1. Guide	Your own confirmation texts stay unchanged.
Inbox	Changed	Replies reopen the conversation: if a customer replies via WhatsApp or SMS to a message from you, the reply lands in the previous conversation – even if it was already closed (quoting a message always, otherwise up to 7 days after your last message, adjustable under Settings → Opening hours). The history shows “Reopened by customer reply”.	Messenger and Instagram: unchanged. Replies to campaign messages still start a new conversation once the period has passed.
Tasks	New	Task type: task, callback, call, email or follow-up. The list shows the type, you can filter by it and change it when editing. Flows create e.g. callback tasks.	—
Account	Fix	The sign-up source now stores search terms with umlauts in full (e.g. “rückruf” instead of “rckruf”).	Sources that were already stored stay unchanged.

16 October 2026 — Version 1.1.40

Area	Type	Change	Known limitation
Automations	Changed	“Contact created” now fires for every new contact: also for customers who write via WhatsApp, email, SMS, phone, Messenger or Instagram, who book online, whom you create for a meeting or in the inbox, or who come in through the API. For CSV imports only if you tick “Run automations … for newly created contacts” (default: off).	Please check your welcome rules (Settings → Automations): a “Contact created” rule without a condition now runs much more often, e.g. every new WhatsApp contact gets your welcome message. Add a condition if needed or switch the rule off.
Automations	Fix	Delay applies to all actions: if a rule is delayed, assigning, status, label and note also run at the planned time.	Conditions are not checked again when the actions run. If you changed the conversation by hand in the meantime, the rule overwrites it.
Automations	Fix	Off means off: if you switch off or delete a rule, its planned messages are no longer sent. Each rule shows “Scheduled: N” and lets you cancel all scheduled runs (“Cancel all”).	Switching the rule back on does not catch up on cancelled runs.
Automations	Fix	A new condition starts with a real value. Conditions and actions without a value can no longer be saved.	Older rules with an empty value keep running as before. They are marked “Condition without value” – open them and pick a value.
Automations	Fix	Honest log: every run shows “failed” or “skipped” with the reason, e.g. no own mailbox, template missing, contact unsubscribed or an error from Meta. Tasks for contacts without an owner go to the team member you choose in the rule.	If a rule has several actions, the log shows one result (the first error). The other actions may still have run.
Automations	Changed	Unsubscribes apply to automations too: anyone who unsubscribed no longer gets emails from automations. For each email action you choose “Marketing (with unsubscribe link)” or “Service”.	Existing email actions count as marketing and now get an unsubscribe link. Please set pure service emails (e.g. confirmations) to “Service”.
AI	Fix	The AI assistant and the WebChat bot now find articles from your knowledge base for real customer questions much better.	—
AI	Changed	You pick the AI model from a list (low cost, strong, strongest) or enter your own. The default is now a low-cost, current model. A model that has been switched off is replaced by the default automatically, and you see a notice. The connection test tells you when a model doesn't exist (any more).	—
Inbox	Fix	“New chat” via WhatsApp or SMS: the number is saved with your country code (“0664 …” becomes “+43 664 …”). Before sending you see which number it goes to. Replies land in the same conversation, and a closed conversation is no longer silently reopened.	Conversations started this way before this update are not rewritten. Replies to them may land in a new conversation.
Inbox	Fix	Readable WhatsApp: reply buttons, lists, locations, shared contacts and forms appear as text. A reaction (e.g. 👍) now sticks to the message instead of opening a new conversation.	Reactions to older messages and to campaign messages are not shown. You see a new reaction when you open the conversation again.
Inbox	Changed	Auto-close only when you replied last: if the customer is waiting for an answer, the conversation stays open. You set the period (off, 7, 14 or 30 days) under Settings → Opening hours. The timeline shows “Closed automatically”.	—
Inbox	Fix	Messenger and Instagram: photos, videos, voice messages, files and stickers now arrive. Shared posts and stories appear with a link.	If a file is very large (over 25 MB) or the link has already expired, you see a notice and open it in Messenger or Instagram. Reactions from Messenger and Instagram are not shown yet.
WebChat	Fix	The name field no longer disappears after the first letter. If sending fails, the text stays and the visitor sees “Not sent”.	On websites that block browser storage, the WebChat still can't send.
Contacts	Fix	“Edit contact” shows and keeps all email addresses and phone numbers.	—
Contacts	Fix	Merging without losses: meetings, participations, surveys and campaign sends move to the main contact.	For duplicates merged before this update, the trash shows “N open meetings”. Move these meetings by hand before deleting for good.
Contacts	Fix	Team members with “own contacts only” now also see customers created automatically from their conversations. New field “Owner”. Whoever takes over or replies to a conversation becomes the owner (if there is none yet).	—
Contacts	New	Notes on contacts, companies and deals, right in the timeline. The deal timeline also shows stage changes, tasks and linked conversations.	—
Contacts	Fix	CSV import: umlauts from Excel come through correctly (character set selectable). Phone numbers are converted to international format, and matching finds every spelling.	Numbers imported earlier are not rewritten, but they are found when matching.
Deals	Fix	In the Kanban, the columns are correct again after switching the pipeline.	—
Meetings	Fix	Online booking: no more slots during approved leave, the buffer applies before and after meetings, and meetings where you are only a participant count as busy.	—
Meetings	Fix	Customers who booked online get an email when the meeting is moved or cancelled. The reminder moves along.	For meetings you create on the contact page, the invitation still only goes to the participants.
Phone	Fix	Voicemail no longer fills up: messages that have arrived in the CRM move to “Old messages” on the phone. From 80 % the extension page shows a warning.	On the phone, old messages are deleted after 30 days. They stay in the CRM.
Phone	Fix	No second call in the middle of a call: if you are already on the phone, another caller gets “busy” or your fallback destination. The softphone no longer takes over the second call.	No call waiting. While you are calling in the browser, your desk phone doesn't ring either.
Phone	Fix	When you delete an extension, menu, group, queue, announcement or opening hours, you see “Still in use” and where. The overview shows broken destinations in red.	Deleting is still possible after confirming. References are not moved automatically.
Phone	Fix	Tidier call list: one row per call, no more false “missed” for groups, outgoing “not reached”, “missed – left a message” and a “Call back” button.	For desk phones and apps without a browser, a call is matched by number as before.
Phone	New	Lines: you see whether the line is connected at the provider and can click “Check now”. All active lines take calls. With “Use for outgoing calls” you choose the line for calling out.	“Not connected” does not distinguish between a wrong password and “provider not responding”.
Phone	Fix	Voicemail messages and recordings of deleted accounts are now also removed from the phone system.	—
Marketing	Fix	No more campaigns without a selection: if the date field, brand or text is missing, the campaign can't be saved and sends nothing. Before, it went to all contacts. Before sending you see today's real number of recipients.	Older campaigns saved this way no longer send. You see the reason when you open or send them.
Marketing	Fix	Birthday and date greetings are no longer sent twice after a failed attempt. In WhatsApp campaigns every language version of a template can be chosen.	A campaign uses one language version for all contacts.
Invoices	Changed	Cancelling only without payments: an invoice with a recorded payment or offset can no longer be cancelled. Cancel the payment first under “Payments”. If a credit note is cancelled, the invoice is open again.	Invoices that were cancelled despite a payment before this update stay as they are. Check the VAT overview for those months.
Invoices	Fix	No more credit notes for cancelled invoices. Credit notes go up to the invoice amount at most.	—
Invoices	Fix	You pick the currency from a list. An invalid currency (e.g. “€”) no longer crashes any finance page.	Drafts with an invalid currency: pick a currency from the list before issuing.
Dunning	Changed	Automatic dunning needs your own mailbox. Without your own mailbox the automation can't be switched on, and Finance → Settings shows a warning. Each level gets one automatic attempt, after that the admins get a notice.	The reminder text can be copied, but is not available as a PDF yet.
Dunning	Fix	“Send reminder” always shows a preview first. The minimum interval also applies by hand. The dunning level only goes up if the reminder was really sent – otherwise you copy the text and click “Mark as sent”.	Dunning levels that went up without sending in the past are not reset.
Backup	Fix	Honest and more complete backups: the texts clearly say “without files”. Roles, permissions and brand and team assignments are now included. After “Reset” the backup can be restored without broken references.	Files (attachments, receipts, invoice PDFs, recordings) are not included. After “Reset” and restore, the “Sales” pipeline exists twice.
Security	Fix	The credentials of our operator access are now strictly separated from the rest of the app.	—

15 October 2026 — Version 1.1.39

Area	Type	Change	Known limitation
Security	Fix	Files shown safely: Attachments, media links and logos are only shown directly if they are real images (JPG, PNG, GIF, WebP). Everything else, such as SVG or HTML files, is offered as a download only. This way no foreign code can run in the browser through a file.	A previously uploaded SVG logo is replaced by your initials. Please upload your logo again as PNG, JPG or WebP.
Security	Fix	Protection against password guessing: The limit for sign-in attempts and “Forgot password” now counts the visitor's real address. Before, it could be bypassed.	—
Security	Changed	Backups without passwords: The export no longer contains passwords, 2FA keys or webhook keys. On restore, users come without a password and without 2FA and are deactivated: activate them under Team, then they set their password via “Forgot password?”. Plan, billing and security settings are not taken over.	—
Security	New	Operator access in the log: When our support enters or leaves your account, or changes its status or plan, this appears in your security log (badge “Operator”). Backup export and import are logged too. Our operator access can additionally be protected with 2FA and signs out after 12 hours.	—
Security	Fix	An unused interface that returned settings without sign-in has been removed.	—
Channels	New	One page, one number – one account: A Facebook page, an Instagram account or a WhatsApp number can now be connected to only one The-Y account. It is only connected if Meta confirms that your access really belongs to that page or number. Messages only go to that account.	If a page or number is already connected to another account, you'll see a notice. Write to us and we'll clarify who it belongs to. The connection status isn't shown in the channel view yet.
Channels	Fix	Errors when connecting Facebook, Instagram and WhatsApp now appear as a clear sentence in your language, with the next step. No more “[object Object]”.	—
Connecting WhatsApp	Fix	Honest status when connecting: The number is registered with a random 6-digit PIN (instead of “000000”). The PIN is shown once – write it down. If registration fails, you see “Almost done – number not registered yet” with the reason and, if needed, a field for your existing PIN. If the Meta window stops, you see the reason and a tip for that step.	—
Connecting WhatsApp	Changed	The texts on WhatsApp costs are updated to Meta's prices as of 1 October 2026. New help answers: admin rights and 2FA on Facebook, verification code doesn't arrive, WhatsApp for Windows after connecting with the WhatsApp Business app kept.	—
Inbox	Fix	No more lost text: If sending fails (no connection, limit reached, read-only …), your text and attachments stay. You see the reason and can click “Send again”. The send button no longer hangs on a weak connection. When you switch between conversations, each one keeps its own draft.	Drafts are lost when you reload the page.
Inbox	Fix	Status, assignment, priority, brand and labels now tell you when a change wasn't saved. “New chat” names the real reason when something is missing.	—
Team	Fix	User limit includes invitations: Open invitations count towards the user limit. It is checked when inviting, creating, accepting and reactivating. Changing a role never changes the count.	Accounts that are already over the limit keep their users. Only new invitations are blocked then.
Team	Fix	New members see conversations right away: Anyone invited or created gets the chosen brand or the default brand. The team list shows “no brand” if someone isn't assigned to a brand, and the inbox explains why it's empty.	—
Plan	Changed	In the cloud, every “limit reached” notice and every upgrade button leads to Cloud Pro (Settings → Licence). If you have already bought with a different email address, your plan shows “being checked” instead of new buy buttons.	—
Phone	Changed	Softphone only with your own extension: Calling in the browser only works with an extension assigned to you. Without one, the phone page shows a notice on how to get one.	Anyone who used to call without their own extension now needs one (Phone → Extensions).
Phone	Fix	Separate parking per company: Parked calls (700, pick up with 701–720) are now separate for each company. With 701 you only pick up your own parked calls.	—
Phone	Fix	When an account is deleted or suspended, its extensions and lines are also removed from the phone system.	Voicemail messages and recordings of deleted accounts are not yet removed from the phone system's storage.
Contacts	Fix	“Own contacts only” applies everywhere: Merge, timeline, custom fields and the deal form only show contacts and companies you're allowed to see.	—
Self-hosted	Changed	Email intake via webhook now needs a secret (`INBOUND_EMAIL_SECRET`). Email intake via IMAP is not affected.	If you used the webhook without a secret, set `INBOUND_EMAIL_SECRET` (or temporarily `INBOUND_EMAIL_ALLOW_UNSIGNED=true`).
Self-hosted	Fix	The key for stored credentials is now read from `APP_ENCRYPTION_KEY` or `ENCRYPTION_KEY`. Before, it depended on the database password. Existing data stays readable.	Behind several proxies: set `TRUSTED_PROXIES` or `CLIENT_IP_HEADER` so the sign-in limit sees the real address.

15 October 2026 — Version 1.1.37

Area	Type	Change	Known limitation
Account	Changed	Accounts with a licence key stay: If you self-host and only use your account on crm.the-y.at for your licence key, it is never deleted for inactivity.	—

14 October 2026 — Version 1.1.36

Area	Type	Change	Known limitation
Automations	Fix	Correct number for “Runs this hour”: The display now counts the actual runs in the current hour. Before, it often stayed at 0 after a run. Also “1 run today” instead of “1 runs”.	—
Usage	Fix	“unlimited” instead of “-1”: The usage page now shows “unlimited” for limits without a cap.	—
Account	Changed	Preparation for paid cloud plans: Everything for a paid cloud plan is prepared in the background. Nothing changes for existing accounts.	The plan cannot be booked yet.

14 October 2026 — Version 1.1.35

Area	Type	Change	Known limitation
Automations	New	Protection against endless loops: If one rule triggers the next, the chain stops after 5 rules. The same rule runs at most 10 times in 10 minutes on the same contact. Stopped runs appear in the log, and admins get a notification.	The 10-in-10 limit applies to rules with contact actions (email, WhatsApp, SMS, webhook, AI, deal …).
Automations	New	Hourly quota instead of overload: Every account has a quota of runs per hour (free 500, paid 5,000). Anything above it runs later and is not dropped. The automations page shows “Runs this hour” and the latest runs, with a “Problems only” filter.	A run may take at most 60 seconds. Webhook actions wait at most 10 seconds and read at most 1 MB.
Automations	Fix	Delayed steps are no longer silently lost: Before, a delayed step could disappear on a restart. Now it is processed safely, and an abort shows up in the log. Delayed steps are checked every 15 instead of every 60 seconds.	A run interrupted exactly by a crash is marked “aborted” and not retried.
Automations	Fix	Automatic emails and redirects: Emails sent by automations are marked as automatic, so out-of-office replies don’t loop. Webhooks and action buttons now check every redirect target before following it.	—
Self-hosting	Changed	New MinIO image: MinIO no longer publishes its own images. The installer and templates now use a maintained image (Chainguard), pinned to a tested version. New installations work again. Existing data is read without migration.	Existing installations switch once, see the self-hosting guide (a few seconds).

14 October 2026 — Version 1.1.34

Area	Type	Change	Known limitation
Phone system	New	“Press 1 for WhatsApp”: New building block for menus. The caller presses a key and immediately gets a WhatsApp message from you. The conversation lands in the inbox and the team is notified. If WhatsApp isn’t possible, an SMS is sent (if set up) or a “callback requested” note is created.	The template “rueckruf_verpasst” must be approved by Meta. At most one message per number in 24 hours. Numbers that opted out of WhatsApp get none.
Phone system	New	Missed calls without an open softphone: The server now records missed calls itself. You get a conversation in the inbox and a team notification, and a new contact is created, even if nobody is logged in. Calls that only end in a menu are listed as “ended in menu”.	In rare cases the same call can appear twice in the inbox.
Phone system	Changed	Voicemail instead of hanging up: If nobody answers an extension that has a mailbox (also when busy, on “do not disturb” or offline), voicemail picks up. Before, the call was hung up. Ring time and destination are set per extension. Ring groups now ring for the configured time instead of at most 30 seconds.	Also applies to internal calls and transfers.
Phone system	Changed	No more endless menus: After 3 wrong keys (configurable) the call goes to the fallback destination. Without input, a menu hangs up after 20 rounds. After an announcement the call can now continue, for example into a menu, instead of hanging up.	—
Phone system	New	Holidays and day/night switch: Opening hours can treat public holidays as “closed”, from your own list or automatically. A switch “Automatic / Always open / Always closed” sits right in the list.	Automatic holidays are available for Austria and Germany.
Phone system	New	Template “Trades – never miss a call”: A ready-made call flow. During opening hours all extensions ring for 20 seconds. After that, and in the evening, a menu plays: “1 = WhatsApp, 2 = voicemail”. The template only creates new entries and changes nothing existing.	Greeting texts are in German.

14 October 2026 — Version 1.1.33

Area	Type	Change	Known limitation
WhatsApp	New	WhatsApp usernames: Customers who use a WhatsApp username and hide their phone number now end up on the right contact, and your replies reach them. Inbox and contact show “@username” or “WhatsApp user (number hidden)” instead of a wrong number. Blocking, automations and campaigns also work with these contacts.	Meta only delivers verification-code templates to phone numbers. If a customer removes their username, the last known one stays visible.
Inbox	Fix	Away message is delivered again: The automatic reply outside business hours on WhatsApp, SMS and Messenger was sent to an internal ID instead of the customer and therefore never arrived. It now goes to the right address.	—

11 October 2026 — Version 1.1.32

Area	Type	Change	Known limitation
Phone	Fix	Phone system changes take effect right away: Greetings, menus, extensions and the destinations of your phone numbers that you change in the CRM are now picked up by the phone system on its own within a few seconds. Until now, changes didn't reach the system in the cloud. Everything saved since 25 September is applied once with the update. If applying ever fails, the phone pages show a notice.	Running the phone system yourself: one-time steps under “One-time reload after the update” in the self-hosting guide.
Phone	Fix	Every phone number reaches its own destination: With Zadarma the phone system now recognises which of your numbers was dialled – several numbers on one Zadarma account now go to their own menus, groups or extensions. If a line doesn't pass on the dialled number, the destination of the topmost number on the phone numbers page applies (marked with ⭐) – until now this was random.	Still to be confirmed with real Zadarma calls.
WhatsApp	New	Put the verification call straight through: When you add a WhatsApp number and verify “By call”, Meta reads out the code with a computer voice. If the number runs through your phone system with a greeting or menu, the greeting used to talk over the code. The “Request code” step now has the button “Put the code call straight through to me (10 min)”: the number rings straight on your extension for 10 minutes, then the normal flow applies again automatically. You can also see and end running redirects on the phone numbers page.	You need your own extension in the CRM. If the line doesn't pass on the dialled number, all incoming calls go to you during these 10 minutes.
Phone	New	Greeting while it rings: In ring groups the caller can now hear a greeting right away while the team's phones are already ringing – followed by a ringing tone or hold music. Whoever picks up is connected immediately. The ring time is fixed or “as long as the greeting”; after that the call moves on as usual, for example to your mobile. A timeline shows what the caller experiences. Queues now also have a “Greeting on entry”.	Only with your own greetings (text, recording or file).

11 October 2026 — Version 1.1.31

Area	Type	Change	Known limitation
WhatsApp	New	Continue verifying a number: If a new number is already in your WhatsApp account but not yet verified (e.g. because Meta throttled the request while adding it), the “Add another number” assistant continues right at “Request code” – without a new display-name request.	—

11 October 2026 — Version 1.1.30

Area	Type	Change	Known limitation
Instagram	Fix	Replies to Instagram messages are delivered: Replies to Instagram Direct messages, private replies to Instagram comments and the automatic “Get started” reply now go through the linked Facebook Page, as Meta intends. Previously Meta rejected them with “permission missing (code 3)”. Undelivered replies can be re-sent with “Send again”.	—

11 October 2026 — Version 1.1.29

Area	Type	Change	Known limitation
Inbox	New	Fix undelivered messages yourself: When a reply says “not delivered” or “only saved”, the CRM now shows admins the way out right there: “Connect channel →” jumps straight to the affected channel in the settings, “Send again” sends the same message once more – without a copy in the conversation. This is only offered when the cause can be fixed (channel without access, access expired, connection problem).	Team members without admin rights see “Please let an admin know”.
Inbox	Fix	24-hour window explained clearly: If a reply to Messenger, Instagram or WhatsApp fails because the customer hasn't written for more than 24 hours, the message now says so – Messenger used to show a misleading “permission missing”. For WhatsApp, “Send template” opens the approved templates right away.	—
Everywhere	Fix	Deleting and confirming works everywhere again: Questions like “Really delete?”, notices and short inputs now appear as a window in the CRM's own design instead of a browser pop-up. In embedded browsers (e.g. when the CRM is opened inside another app) those pop-ups were switched off – deleting didn't work there at all. On phones they slide up from the bottom; on the keyboard, Esc = cancel, Enter = confirm.	—

11 October 2026 — Version 1.1.28

Area	Type	Change	Known limitation
Channels	Fix	“Connect Facebook & Instagram” creates both channels: After connecting you now get the Facebook Page and the linked Instagram account as separate channels – for messages, comments and posts. Previously the Instagram account was only shown as “linked” on the Page. Connecting again creates nothing twice.	Existing connections: connect once more and the Instagram channel appears.

11 October 2026 — Version 1.1.27

Area	Type	Change	Known limitation
Comments	New	Comments are also fetched directly: The CRM fetches new comments from your Facebook Pages and Instagram accounts itself – automatically every 5 minutes and with the “Fetch now” button under Comments. No comment gets lost, even if Meta does not deliver a notification. Nothing is created twice.	Covers comments from the last 7 days on the 10 most recent posts. Meta does not always include the commenter’s name.

11 October 2026 — Version 1.1.26

Area	Type	Change	Known limitation
Inbox	Fix	Replies to Messenger and Instagram messages are delivered: Incoming direct messages are now stored with the connected Page, and replies from the inbox go to the customer through that Page. Previously the reply was saved in the CRM but not sent. Existing conversations are assigned automatically.	Several Facebook Pages in one account: older conversations get their Page with the customer’s next message.
Inbox	New	Sender name prepared: For new Messenger and Instagram messages the CRM requests the sender’s name from Meta (on Instagram otherwise the username) and creates the contact with it.	—
Inbox	Fix	Sending problems are visible: If Meta or WhatsApp rejects a reply, the message shows “⚠ not delivered” with the reason and an explanation. If a reply was only saved because the channel has no access, it shows “saved only, not sent”.	—

11 October 2026 — Version 1.1.25

Area	Type	Change	Known limitation
Channels	New	Meta hub – no more trips to business.facebook.com: Under Settings → Channels you see every area per WhatsApp number, Facebook Page and Instagram account as tiles with a traffic light. Whatever Meta allows, you do right in the CRM; what Meta doesn't allow, we explain step by step with a direct link – and check ourselves afterwards whether it worked.	Works on mobile; "We'll help you" on every page.
WhatsApp	New	Business profile with live preview: edit profile photo, about, description, industry, address, email and websites – and see exactly what customers see in WhatsApp.	—
WhatsApp	New	Welcome message, conversation starters and commands: first-time contacts automatically get your welcome text. Up to 4 tappable questions and your own "/" commands – with chat preview.	The welcome counts as a service reply, no template needed.
WhatsApp	New	QR codes and short links: create with pre-filled text, edit, delete and download as PNG or SVG – for flyers, shop windows and your website. Your own names keep them apart.	Change the text later; printed codes stay valid.
WhatsApp	New	Change the display name: request it from the CRM, track "under review / approved / rejected" with the reason in plain language – and re-register with one click after approval.	—
WhatsApp	New	Set the two-step PIN: with an explanation of what it's for. The PIN goes straight to WhatsApp and is stored nowhere.	—
WhatsApp	New	Block and unblock contacts: right from the inbox (also in the mobile menu) or as a list.	Admins only; Meta only allows blocking after a message in the last 24 hours.
WhatsApp	New	Costs as Meta sees them: what Meta bills per month and type – next to our estimate, with differences explained.	—
WhatsApp	New	Add another number entirely in the CRM: create the number, get a code by SMS or call, type it in, set a PIN – done, without the Meta pop-up.	—
WhatsApp	New	Payment method, verification, account restriction: step-by-step guide with the on-screen labels and a direct link – back in the CRM, "Check now" shows whether Meta has picked it up.	—
Facebook	New	Messenger welcome, conversation starters and menu: a "Get started" button with an automatic reply, up to 4 questions and a persistent menu – with preview. Taps arrive in the inbox.	—
Facebook	New	Edit Page info: short and long description, phone, website, email, opening hours and legal notice right from the CRM.	Page name, images, category and address: guide + direct link.
Instagram	New	Conversation starters for Instagram Direct and an overview of your profile (bio, website, followers).	Instagram only lets you change bio/website in the app – guide included.
Sign-in	Fix	One sign-in for everyone on crm.the-y.at: Signing in at crm.the-y.at/login now finds your workspace via your email address. Until now you always ended up in the demo there – anyone who had registered for free could only get into their account via their own address (crm.the-y.at/t/…).	—
Sign-in	New	Several workspaces, one email: If your email belongs to several companies, you “Choose a workspace” after signing in. Via your name at the top right you switch between the workspaces you're signed in to without entering your password again, or sign in to another one. The CRM remembers the workspace you used last.	Signing out signs you out of all workspaces in this browser.
Sign-in	Fix	“Forgot password” also works on crm.the-y.at: The link goes to every account with this email; if it belongs to several workspaces, they are all listed in one email, each with its own link. After resetting, you go straight to your workspace's sign-in with your email already filled in.	—
Account	New	Your sign-in address at a glance: The welcome email, Settings → Account and the menu at your name show “Your sign-in address: crm.the-y.at/t/…” – with a copy button, e.g. for your team.	—
Channels	Fix	Adding a channel works for new accounts: New accounts get their first brand named after the company right away; existing accounts without a brand now have one too. Before, adding email, SMS, Messenger or Instagram failed silently for freshly registered accounts. Should a brand ever be missing, the channels page says so clearly and offers “Create brand”.	—
Security	Changed	Sign-in reveals nothing: Whether an email address exists can be told neither from the response nor from the response time. Test environments and the public demo are never reachable by password, suspended accounts stay suspended, two-factor protection and the limit on sign-in attempts work as before.	—
Start page	Changed	Clear paths: If you're signed in and open crm.the-y.at, you land directly in your workspace. Otherwise there's “Sign in”, “Create account” and “Try the demo” – the demo only via this explicit path.	—
Finance	New	Set your VAT basis and return period: Under Finance → Settings you choose accrual or cash basis and your VAT return period (monthly, quarterly, yearly). Every option is explained in plain language, with the rules of your country (Austria, Germany, Switzerland) – who may use what and which thresholds apply. The usual default for your country is marked.	Not tax advice – the setting only controls the preview. Austria has no yearly VAT return, so it cannot be selected there.
Finance	Changed	Every tax in the right month: The VAT overview now follows your country's law. Austria (accrual): month of the supply – if you invoice only later, one month later. Germany (accrual): month of the supply. Switzerland: when invoiced. Cash basis: month the payment arrives, pro rata for part payments. Advance payments before the supply count in the month of payment. The journal shows the VAT period for every entry.	Preview for checking. Special cases (e.g. partial supplies, Swiss net tax rate method) are not calculated separately.
Finance	New	Supplements instead of silent changes: If a tax belongs to a month you have already closed – say an invoice you write only afterwards – that month stays unchanged. The tax appears in the current period as “Supplement to MM/YYYY” with a clear note on which return it concerns. You already see this note when issuing the invoice.	Whether and how to correct a return is something to clarify with your tax adviser or the tax office.
Finance	New	Book invoices that arrived late: If a supplier invoice only arrives after the month was closed, enter “Received on” on the receipt. It can then be booked and input VAT counts in the month of receipt. On cash basis in Austria and Switzerland, input VAT only counts once the invoice is paid.	—
Finance	New	Closing a month now saves the figures of the VAT overview. If the preview of a closed month changes later – for example after switching the VAT basis – the overview shows both values side by side.	Months closed before this update have no saved figures.
Legal	Changed	Terms of Use 1.4: New section 4a “Accounting features” – the CRM helps with your own records up to the hand-over to your tax advisor, but it is not tax advice; retention and returns remain your responsibility. All versions in the legal archive.	—

11 October 2026 — Version 1.1.24

Area	Type	Change	Known limitation
Templates	New	Build WhatsApp templates with a preview: A builder shows you live, on a phone in WhatsApp style, how the message will look to the customer – with header (text, image, video or PDF), one-click variables, footer and buttons (quick reply, website link, call, copy code). Meta's limits are counted visibly, and before you submit, the CRM checks the most common rejection reasons – including a warning when a service template sounds like advertising.	Full-screen on phones with an "Edit / Preview" switch.
Templates	New	Template gallery: 14 ready-made templates for typical occasions (appointment confirmation, reminder, job done, invoice, payment reminder, missed call, review request, welcome, offer …) in German, English and Turkish – one click takes them into the builder.	—
Templates	New	Status in plain words and in real time: Approved, in review, rejected (with the reason translated and "How to fix it"), paused or re-categorised by Meta – you see it right away and get a notification in the CRM. "Fix and resubmit", "Duplicate" and "Add language" are one click each.	Real time via Meta notifications; as a safety net the CRM also checks regularly.
Inbox	Changed	Send a template: search templates, language matched to the contact, first name etc. already filled in, preview with the real values. Images, documents, links with a variable and offer codes from the template are sent automatically – also for campaigns and automations.	—
Channels	New	"Is something wrong with my number?" – WhatsApp status: a traffic light per number with quality, messaging limit, display name, connection, payment method, account review, receiving, access and sending errors of the last 7 days – all in plain words, with the next step and a direct link into WhatsApp Manager. The dashboard shows "WhatsApp: all good" or "1 notice".	If quality drops, the number gets restricted or the limit is lowered, all admins get a notification and an e-mail – only once per event.
Posting	New	One post for Facebook and Instagram at once: new editor with a live preview of how it looks – Facebook feed, Instagram feed, story and reel. Optionally a separate text per platform (“Customize for Facebook and Instagram”). Upload images and videos by drag & drop or straight from your phone; several images become a carousel on Instagram.	—
Posting	New	Format check up front, in plain words: aspect ratio, file size, video length and text length are checked against Meta's rules before posting – e.g. “Instagram only accepts JPG images” or “Facebook reels max. 90 seconds”. Instagram requires an image; this shows as a hint, not an error.	—
Posting	New	Writing aids: character count per platform (incl. hashtag count for Instagram), emojis, hashtag suggestions from your earlier posts and – with your own AI key – a text suggestion.	AI only with your own AI key; off in the test environment.
Posting	New	Content calendar: month and week view of all scheduled and published posts. On a computer simply drag scheduled posts to another day, on a phone use “Move to …”. Plus a hint when most comments came in so far – no promises.	—
Posting	Changed	Status in plain words: Draft, Scheduled, Publishing (Instagram is still processing a video), Published with a link to the post, Failed with an understandable reason and “Try again”, and “Simulated – not published”. Each platform has its own status.	—
Posting	New	After publishing: likes, comments and (on Facebook) shares right on the post, plus “View comments”.	Meta only shows reach in Business Suite – The-Y would need an extra insights permission, which we deliberately do not request.
Posting	New	Templates for recurring posts such as “Holiday opening hours” or “We're on holiday” – with examples to start, plus Duplicate and “Save as template”.	—
Comments	New	New “Comments” view: all Facebook and Instagram comments sorted by post – with thumbnail, the post's text and the comments as a thread including replies. Counters for open and new, filters for Facebook/Instagram/open. Your own replies appear as “Us”.	—
Comments	New	Right from the view: reply publicly (with quick replies from your templates), reply privately via Messenger or Instagram Direct, like (Facebook), hide/unhide, delete (with confirmation) and mark as done.	According to Meta a private reply is possible only once and within 7 days. Liking Instagram comments isn't possible through the API (extra permission needed).
Inbox	Changed	Facebook and Instagram comments in the inbox show the post at the top (image, beginning of the text, link) and lead to all comments with one click. Replies in the same thread land in the same conversation; edits, deletions and hiding on Facebook are synced.	Instagram doesn't report deletions or edits by authors – these stay visible in the CRM.
Demo	New	The live demo and your own test environment show posts with images, a calendar, templates and comment threads (incl. hidden spam and a private reply). In the test environment you can try everything – nothing goes to Facebook or Instagram.	—

11 October 2026 — Version 1.1.23

Area	Type	Change	Known limitation
Demo	Changed	The demo is now your own test environment: crm.the-y.at/demo instantly starts your own demo with sample data – you are the admin and can try everything. If one is already running, you go straight back into it. Old links to crm.the-y.at/try lead there as well.	Runs for 24 hours, then everything is deleted; at most 3 demos per connection and day. If the limit is reached, you see the sample company “view only” – with a note explaining why.
Finance	New	Correcting a closed month: A closed month stays final – like the posting lock in DATEV or Lexware. Corrections are made in the open month: payments and receipts there show “Correct (reversal)” instead of “Edit”. A payment gets a counter-entry, a receipt gets a reversal receipt and, if you like, a correction receipt to fix right away. Invoices are corrected with a credit note. Every correction refers to the original and is recorded in the audit log.	A closed month cannot be reopened, not even by support.
Finance	Changed	The “Close month” dialog now clearly says that closing is final and how to correct afterwards; closing requires ticking a box. Invoices from a closed month can no longer be cancelled, only corrected with a credit note. The credit note counts in the VAT overview in the month it is issued.	—
Finance	Fix	A booked but unpaid receipt from a closed month could no longer be marked as paid. This now works with a payment date in the open month (“Mark as paid”, also via the bank statement).	—
Inbox	Fix	Opening the inbox showed an error in the browser console because times were calculated differently on the server than in your browser. Times are now shown in your time zone without errors.	—
Inbox	Fix	A message that consists only of an attachment now shows just the attachment – without an empty speech bubble.	—

11 October 2026 — Version 1.1.22

Area	Type	Change	Known limitation
Finance	New	New “Finance” menu: invoices, open items, payments, bank, receipts, income & expenses, VAT overview and the export for your tax advisor in one place. Set your country, tax rates, number ranges, reminder levels and accounts under Finance → Settings – in detail for Austria, Germany and Switzerland, plus all EU countries and other countries with your own rates.	Not tax advice, nothing is sent to the tax office.
Invoices	Changed	Number on issue: drafts no longer have a number. When you issue an invoice, The-Y assigns the next number – sequential and without gaps. Before that, The-Y checks the mandatory details for your country and shows notes you can read and confirm.	Existing drafts lose their provisional number.
Invoices	New	Issued means unchanged: sender details and the PDF are frozen on issue and stored with a checksum. If your address or VAT ID changes later, old invoices stay exactly as you sent them.	Older invoices get their stored PDF the first time they are opened.
Invoices	New	Tax rate per line (in Austria e.g. 20, 13, 10 and 4.9 %), date or period of service, customer VAT ID with a check, and the right notes for small businesses, reverse charge, intra-EU supplies and exports added to the invoice automatically.	—
Invoices	New	Payments and reminders: record partial payments, see open items and how overdue they are, send reminders in several levels (three are set up) with your own text – by button or automatically, through your own email inbox with the invoice PDF attached. A credit note is offset against the open invoice automatically.	Without your own inbox the reminder is only logged. The reminder fee is only mentioned in the text.
Finance	New	Upload bank statements: camt.053 or CSV from your online banking. The-Y suggests the matching invoice, you confirm – and the payment is recorded. Duplicate transactions are detected.	No direct bank connection.
Finance	New	Receipts: upload expense receipts (PDF, photo, XML) or forward them to your receipts inbox. The-Y reads e-invoices (ZUGFeRD, Factur-X, XRechnung) automatically; with your own AI key also photos and PDFs.	—
Finance	New	Income & expenses and VAT overview: everything by payment date, mapped to the codes of the tax forms (E 1a in Austria, Anlage EÜR in Germany), plus a VAT preview per month or quarter.	Preview for checking – not tax advice, nothing is sent to the tax office.
Finance	New	Export for your tax advisor: a monthly ZIP package with the list, all invoice PDFs, receipts and bank statements – plus a DATEV batch file and BMD import. Close finished months; payments and booked receipts then stay unchanged.	Test DATEV and BMD with your tax advisor before first use. Closing a month is final.
Invoices	New	E-invoice in XRechnung format (e.g. for German public authorities with a Leitweg-ID) and the Swiss QR-bill directly in the PDF.	ZUGFeRD output will follow.
Account	Changed	Before you reset or delete your account, you download a complete export of your invoices, receipts and records – invoices must be kept for 7 years (Austria) or up to 10 years (Germany).	—
Team	New	New permissions “View finance” and “Manage finance”: admins have both, supervisors can view.	—
Channels	New	WhatsApp stays connected: after connecting, The-Y sets up an access that doesn't expire – if Meta allows it. Otherwise the channel view shows how long the connection is valid, and you get a notice in the CRM plus an email with “Reconnect now” 14, 7 and 1 day before. An expired connection clearly says “Connection expired – reconnect”.	—
Channels	New	Never alone while connecting: next to “Connect WhatsApp” and “Connect Facebook & Instagram” there's a step-by-step guide for every Meta window, common problems with solutions and a “We'll help you” button – your request reaches us with the last error (never passwords or keys).	—
Channels	Changed	Meta errors in plain words: Meta error messages when connecting and sending (e.g. “24-hour window closed”, “connection expired”, “permission missing”) appear as a sentence with the next step; the code is shown in small print – also in the inbox for “not delivered”.	—
Channels	Changed	When you delete a WhatsApp channel, The-Y also ends its access to your WhatsApp account at Meta.	Resetting or deleting the account doesn't revoke the access automatically yet.
Marketing	Changed	Consent for WhatsApp and SMS: WhatsApp and SMS campaigns only go to contacts with explicit consent. Editor and list show how many contacts are excluded for this reason. Email stays as before (unsubscribe link), with a note about the existing-customer rule.	Existing contacts without recorded consent no longer receive WhatsApp/SMS campaigns until consent is recorded.
Contacts	New	Consent per channel with date and source on the contact page (manual, import, by message, unsubscribe link) and as columns in the CSV import (“yes” never overrides an opt-out).	—
Channels	New	STOP and START: if a contact writes “STOP”, “STOPP”, “ABMELDEN” or “UNSUBSCRIBE” via WhatsApp or SMS, they're unsubscribed (noted in the conversation, with a short confirmation on WhatsApp); “START” or “ANMELDEN” subscribes again. For SMS there's a new receiving address you enter at your SMS provider – replies then also arrive in the inbox.	No confirmation message for SMS.
Demo	New	Try it yourself – no sign-up: At crm.the-y.at/demo or via “Try it yourself” in the live demo you instantly get your own test environment with sample data. You are the admin and can create, edit and delete everything – contacts, deals, invoices, campaigns, automations, settings. Nothing leaves the system: emails, WhatsApp, SMS, calls, posts and webhooks are only simulated, with a notice right where it happens.	The test environment runs for 24 hours and is then deleted including its files; the data is not carried over when you sign up. At most 3 test environments per connection and day, 5 MB of files.
Demo	Changed	The live demo now really shows everything with German sample data: invoices, quotes and a credit note (paid, open, overdue, cancelled, draft), deals in every stage including won and lost, appointments for this and next week, a call list with missed calls, team chat, time tracking and leave, knowledge base, automations, canned replies, booking links, telephony settings and reports over the past weeks. Banner: “Just look – or Try it yourself”.	The live demo stays view-only; changes are possible in your own test environment.
Privacy	Changed	For test environments we only store an irreversible hash of the IP address (to prevent abuse) and timestamps – both are deleted together with the test environment. The audit log there stores no IP addresses either.	—
Demo	Fix	Nothing leaves the live demo any more – including reminder or notification emails to the sample team members.	—
Mobile	New	Bottom navigation bar on phones: Inbox, Contacts, Phone, Tasks and “More” are always within thumb reach – with counters for conversations waiting for a reply and for tasks due today or overdue. On a computer the sidebar stays.	—
Inbox	New	Conversations on the phone like a chat app: tap the list, the conversation opens full screen, the reply box stays at the bottom above the keyboard. Templates, knowledge articles and attachments are one tap away; assign, close, snooze and priority are in the “⋯” menu, customer info opens as its own page. The phone’s back gesture returns to the list.	On phones the Enter key does not send – use the send button (like WhatsApp).
Contacts	New	Contact on the phone: large Call (via the CRM phone, otherwise the phone’s dialer), WhatsApp and Email buttons (open a new conversation on that channel). Contacts, companies, deals and invoices show as cards instead of wide tables.	A contact who opted out of calls still triggers a confirmation before dialing.
Phone	New	Softphone on the phone: “Phone” in the bottom bar opens a large dial pad; an active call has large buttons and can be collapsed to keep working in the CRM – the call continues while you switch pages.	Touch tones (DTMF) during a call will follow later.
Deals	New	Pipeline on the phone: swipeable stage columns, a stage bar to jump between them and “Move to …” on every card (finger drag-and-drop does not work in browsers).	—
General	Changed	On phones, buttons, menu items and inputs are at least 44 pixels, inputs no longer zoom unexpectedly on iPhone, forms and dialogs open full screen, phone and email fields show the matching keyboard. The calendar starts in list view on phones.	—
App	New	Add to home screen: The-Y CRM can be installed on Android and iPhone – own icon, splash screen, no browser bar, with shortcuts (long-press the icon: Inbox, Contacts, Tasks). Without internet it shows “No connection”. Only program files are stored, never customer data. Works for self-hosted installations too.	Push notifications for new messages will follow in a later version.

10 October 2026 — Version 1.1.21

Area	Type	Change	Known limitation
Invoices	Fix	Issued invoices are locked: a sent, paid or cancelled invoice can no longer be set back to “Draft”, changed or deleted – not via the API either. Corrections are made with a cancellation or credit note. Status changes are recorded in the log.	The invoice number is still assigned when the draft is created; sender details are read live when printing.
Invoices	Fix	Sent invoices can be printed (PDF) and closed with “Mark as paid” in the editor again. The content fields are locked, with the note “Locked – changes only via cancellation/credit note”.	—
Channels	Changed	WhatsApp in one click: “Connect WhatsApp” starts right on the WhatsApp card – no need to type a number first. Number and name come from Meta. The guide no longer points to developer accounts, IDs or keys; the manual route is under “Advanced (manual)”.	—
Marketing	Changed	Honest campaign numbers: “Sent” only counts what actually went out (simulated sends without a mailbox/account are shown separately), a new “Failed” column, and for WhatsApp also “delivered” and “read” as reported by Meta. If Meta reports an error later (e.g. the per-recipient limit for marketing messages), the message counts as failed.	There are no delivery reports for SMS.
Marketing	Fix	Posts: a post without a connected Facebook/Instagram account is now labelled “Simulated – not published” instead of “Published”.	—
Inbox	New	Every row of the conversation list shows the channel (e.g. WhatsApp, Instagram, Facebook comment) and the time of the last message (“5 min”, “yesterday” …).	—
General	Fix	Mobile: pages fit narrow screens again without sideways scrolling. On phones, language, account and sign-out are in the menu; wide tables scroll within themselves.	—
Demo	New	The live demo now shows campaigns, posts, WhatsApp templates and conversations from Messenger, Instagram and comments – with German sample content.	—

10 October 2026 — Version 1.1.20

Area	Type	Change	Known limitation
Contacts	New	Delete a contact permanently (GDPR): admins delete a person for good – with all conversations, messages, attachments, calls including recordings, notes, tasks and meetings. On the contact page or in the new trash (Contacts → 🗑 Trash), also for contacts that were already deleted. Deals and invoices are kept without a reference to the person.	If the WhatsApp history from connecting the WhatsApp Business app only arrives after the deletion, it creates the person again.
Account	Changed	Deleting or resetting an account now also removes all stored files (attachments, WhatsApp media, post media, logo, recordings). If file storage is briefly unavailable, the deletion is retried automatically.	—
Channels	Changed	Connecting the WhatsApp Business app: the address book is only imported if you tick “Import WhatsApp contacts (address book)” (off by default). The history (up to 180 days) is still imported.	—
Channels	Fix	After the Meta webhooks were set up again, messages sent from the phone, history and contacts of a connected WhatsApp Business app could be missing. All events the CRM processes are now subscribed – and only those.	—
Inbox	Fix	Channel badges show readable names in your language, e.g. “Facebook comment” instead of “fb_comment” – in the inbox, on contact and deal pages, in reports and automations.	—
General	New	Language by link: add `?lang=en`, `?lang=tr` or `?lang=de` to any address, e.g. `crm.the-y.at/login?lang=en`. The choice is remembered and can be switched as usual.	—
License	Changed	Licence check data of self-hosted installations (identifier, version, IP address, time) is deleted automatically: 12 months after the licence ended, was revoked or expired, or when an installation has not checked in for 12 months.	—

10 October 2026 — Version 1.1.19

Area	Type	Change	Known limitation
License	New	Self-host for free: under Settings → License you create a free key for your own server. It comes with the same limits as Free in the cloud (3 users, 1,000 outgoing messages and 200 call minutes per month, 2 GB). No limits: enter a Paid key, your data stays.	No support for the free self-hosted edition (Terms of Use §5a)
Legal	Changed	Terms of Use v1.3: new free licence (§5a), details of the licence check, and the commitment that if the service is discontinued, all self-hosted installations keep running without licence check and without limits.	—
General	Fix	Messages when a Free limit is reached (users, messages, storage, brands) now appear in your language and point to the right way to get more.	—

10 October 2026 — Version 1.1.18

Area	Type	Change	Known limitation
Channels	New	Keep the WhatsApp Business app: a number already running in the WhatsApp Business app on your phone can now be connected without giving up the app. Messages also arrive in the CRM, replies sent from the phone show up in the conversation, and up to 180 days of history plus your contacts are imported.	According to Meta: broadcast lists are turned off, groups are not imported; if the phone is offline for about 14 days, Meta disconnects it.
Channels	Changed	"Connect WhatsApp" now uses Meta's new version (Embedded Signup v4), because the old versions are switched off in October 2026.	—

9 October 2026 — Version 1.1.17

Area	Type	Change	Known limitation
Channels	Fix	"Test connection" in an email mailbox only checked sending (SMTP). Now sending (SMTP) and fetching (IMAP) are checked and shown separately. A rejected login now reads "Login rejected: username or password is wrong" instead of "Command failed"; if the users for fetching and sending differ, a hint is shown.	—
Channels	Fix	After a rejected login, fetching no longer retries every minute, only after 15 minutes or immediately when the credentials are changed. This keeps the mail server from blocking the address because of failed attempts (which would also block sending).	—

9 October 2026 — Version 1.1.16

Area	Type	Change	Known limitation
Channels	Fix	Mailbox passwords and credentials (WhatsApp, SMS, Meta, AI, system mail) showed "set" even when a previously stored value could no longer be read (e.g. after a server move). Now: a "please enter again" warning and a clear error message for email fetching; no connection attempt without a usable password.	—

9 October 2026 — Version 1.1.15

Area	Type	Change	Known limitation
Costs	New	The Costs report now calculates WhatsApp automatically from Meta's rate card (effective 1 Oct 2026): by category and recipient country, the first 1,000 service messages per number per month free. No manual WhatsApp rate needed.	Tracked from 9 Oct 2026; older messages are not included
Costs	Changed	AI costs are shown in US dollars (as providers bill) and no longer added to euro amounts; current model prices added. The The-Y licence is shown in the report.	AI costs are list-price estimates
Website	New	New page Costs: everything you pay us and your providers, with sources and a calculator for every country.	—

9 October 2026 — Version 1.1.14

Area	Type	Change	Known limitation
Account	Fix	Resetting the account now keeps the record of the accepted terms and the sign-up source (they used to be deleted as well).	—
Sign-up	New	Sign-up records which link it came from (campaign code, referring domain, landing page) — without cookies. Details in the privacy policy (German version 1.2).	Applies to new sign-ups
Website	Changed	The CRM page now states clearly: The-Y hosts Free, Paid runs on your own server (as in the terms §6.6).	—

14 September 2026 — Lifetime licence & partner codes

Area	Type	Change	Known limitation
Licence	New	Lifetime licence (one-time purchase): perpetual self-hosting licence — €240 during Alpha & Beta, €480 from Live (incl. VAT, B2B); all modules without usage limits on your own server, updates for as long as provided. Hosted account stays on Free.	Buy via the-y.at/en/crm; licence key on the success page + by email
Licence	New	Redeem partner/promo codes: codes (e.g. from an AppSumo deal) are redeemed at `crm.the-y.at/appsumo` or in the app → lifetime licence key instantly in the app and by email.	Redemption by account administrators only; one code per account
Login	Changed	Sign-up/login support a safe redirect (`?next=`) back to the redemption page.	—

2 September 2026 — Alpha build

Area	Type	Change	Known limitation
Web chat	Fix	Per-brand routing: the web chat widget can be embedded per brand/workspace (`data-ws`) → chats land in that brand's inbox (previously always the default inbox)	Per-brand widget design to follow
Account	New	"My profile" (self-service): every user (admins too) changes their own name, email and password — under "🔒 Security". Password changes require the current password	—
Brands	New	Personal brand-visibility filter: every user chooses under "🔒 Security" which brands they see in the inbox & views — a pure focus filter, no access change (admins still see everything)	—
Telephony	Changed	Built-in phone system for all plans — including Free (up to 200 call minutes/month), Paid unlimited	—
Self-hosting	Changed	Available now: the Founder purchase delivers a license key by email + a guide (previously announced "from Beta")	—
Legal	Changed	Terms/DPA/Privacy at v1.1.1 (netcup as EU sub-processor, voluntary 14-day return right) — snapshots + SHA-256 in the Legal Archive	—

28 August 2026 — Founder launch (Alpha)

Area	Type	Change	Known limitation
Purchase	New	Public Founder purchase active: €10.00/month (total incl. any VAT), clean B2B checkout with company name, VAT ID and binding consent (Terms + Privacy)	Sales to businesses only (B2B)
Legal	Changed	Terms, DPA, Privacy and in-app Alpha terms released as v1.0; draft notes removed (Alpha risk, backup and liability notes remain). Immutable snapshots + full SHA-256 in the Legal Archive	—
Website	Changed	Landing (DE/EN) switched to the active Founder purchase; cancellation via the Stripe customer portal + app	—

27 August 2026 — Alpha build

Area	Type	Change	Known limitation
Security	Fix	HTTP requests are redirected to HTTPS (301) + HSTS enabled; framework/server version hidden	—
Security	New	Security headers (CSP, X-Content-Type-Options, Referrer/Permissions policy, clickjacking protection)	CSP hardening (nonce) to follow
Legal	New	Data Processing Agreement (DPA) incl. TOMs & sub-processors · Legal Archive	Released in v1.0 (2026-08-28)
Legal	Changed	Privacy expanded (staff/health/security data, retention) · new data deletion (whole tenant) · Terms with date/version/precedence · imprint updated	Founder scope being clarified
i18n	Fix	Notification emails, 360° timeline labels and call-log texts are shown in the recipient's/user's language instead of fixed German	—
Email	New	Per-brand branding frame around outgoing support replies	—
Inbox	New	Channel switch from the ticket ("💬 Other channel")	—
Marketing	New	Open and click tracking for email campaigns	—
Workforce	New	Vacation payout (year-end mode "payout")	Payout display to follow
Telephony	Changed	Clean-up (Zadarma legacy → BYO line) · missed calls assigned to the answerer/dialer · "Do not disturb" blocks incoming calls	—
Security	Changed	The public website (the-y.at) also got HSTS + security headers and its server version hidden; the status page reports "Status unknown" on error (never falsely green)	CSP hardening (nonce) to follow
Legal	Changed	Founder price clarified (€10.00 total incl. any VAT, no contradictory "net plus"); Beta definition/refund and backup policy (DPA Annex 3) added	Public Founder purchase active since 2026-08-28

Earlier — Alpha build (excerpt)

Area	Type	Change
Security	New	Two-factor authentication (TOTP) incl. QR code, remember device & org-wide enforcement · immutable security log (audit log)
Account	New	Reset/delete account (danger zone) · snapshot & CSV export
Search	Changed	Global search is typo-tolerant (fuzzy/trigram)
Support	New	SLA rules (business hours, pause on "waiting for customer") · CSAT · macros · knowledge base + help portal
Automation	New	Rule engine (triggers/conditions/actions, nested groups, time scheduler, AI/omnichannel actions)
GDPR	New	Marketing unsubscribe link (one-click) · consent per channel · bounce handling

Note: during the Alpha we ship continuously and without invented dates. Since version 1.1.14 (2026-10-09) every release has a version number; earlier entries are named by date. Security fixes are listed only after they are resolved and without attack details. Data migrations and changed limits are marked separately.