Data Security

Contractors trust ZionBuild with payroll, budgets, client details and site photos. We protect that information with a simple rule: collect only what is needed, give people only the access they need, and keep a person in control of important decisions.

• check_circle Every user signs in with their own account. Shared logins are not needed
• check_circle Access is controlled by roles and permissions, so team members see and do only what their role allows
• check_circle Homeowners using the Client Portal see only the project information their contractor has authorized, such as progress updates, photos, accomplishment reports and milestones
• check_circle Account owners can change roles or remove access at any time, for example when someone leaves the company

• check_circle Passwords are stored only as secure one-way hashes, never in plain text, so not even our team can read them
• check_circle Login and form endpoints are rate-limited to slow down password guessing and automated abuse
• check_circle Forms are protected against cross-site request forgery, and website forms also filter out spam bots

Connections to the ZionBuild platform and this website are encrypted with HTTPS (TLS), so information sent between your device and our servers cannot be read or changed along the way.

AI features such as AI Photo Analysis only make suggestions. A person must accept a suggestion before official progress changes; AI never updates your project on its own. AI is used to provide features to you, not to sell or share your project data.

This website uses our own analytics instead of third-party ad trackers:

• check_circle No IP addresses or full browser details are stored
• check_circle No advertising or cross-site tracking cookies
• check_circle Form analytics records which field was clicked, never what was typed
• check_circle Visitors with "Do Not Track" or "Global Privacy Control" turned on are not tracked
• check_circle Analytics data is deleted automatically after 13 months

• check_circle Only team members who need it to provide support or keep the service running can access customer systems
• check_circle Our team is bound by confidentiality obligations
• check_circle We access a customer's data only to provide the service, fix a problem, or when the customer asks us to

If we discover a security incident affecting personal data, we act quickly to contain it, investigate, and fix the cause. Where a breach is likely to put people at risk, we notify affected customers and the National Privacy Commission as required by the Data Privacy Act and NPC rules.

• check_circle Use a strong, unique password and don't share your login
• check_circle Give each person their own account with the right role
• check_circle Remove access promptly for workers, staff or clients who no longer need it
• check_circle Keep your phone and computer updated and locked when not in use
• check_circle Be careful with links or messages asking for your ZionBuild password. We will never ask for it

If you believe you have found a security issue in ZionBuild or this website, please email hello@ziontek.co with the subject "Security report" and as much detail as you can. Please give us reasonable time to fix it before sharing it publicly, and do not access or change other people's data while testing. We appreciate responsible reports.