Data Storage & Protection

How Zirzoner stores and protects user data. We use encryption, access controls, monitoring, and other security measures to keep your information safe.

Last updated: June 2026

This section explains where your data is stored and how we protect it from unauthorized access, misuse, or loss.


Where Your Data Is Stored

Your data is stored and processed using infrastructure provided by:

  • Oracle Cloud Infrastructure (OCI)
  • Heroku
  • DigitalOcean
  • Vercel

Data may be stored in multiple locations depending on the service. These providers maintain their own security measures and comply with industry standards.


How We Protect Your Data

Encryption

We use encryption to protect your data:

  • In Transit: All data between your device and our servers is encrypted using HTTPS/TLS. This means your information is protected when it travels over the internet.
  • At Rest: Data stored on our servers is encrypted to protect against unauthorized access.

Access Controls

We limit who can access user data:

  • Access to personal data is restricted to authorized personnel who need it to perform their jobs.
  • We use role-based access controls to ensure people can only access what they need.
  • Access permissions are regularly reviewed and updated.

Authentication Security

We protect your account through:

  • Secure authentication methods, including OAuth with trusted providers
  • Single Sign-On (SSO) with proper session management
  • Protection against common attacks like credential stuffing and brute force

Monitoring and Logging

We monitor our systems to:

  • Detect suspicious activity and potential security threats
  • Track access to user data
  • Identify and respond to security incidents
  • Maintain platform integrity

Security Updates

We maintain security by:

  • Regularly updating software and dependencies
  • Applying security patches promptly
  • Reviewing and improving security practices
  • Keeping infrastructure up to date

What You Can Do

Protecting your account is a shared responsibility. We recommend you:

  • Use a strong, unique password
  • Enable additional security features when available
  • Keep your third-party account credentials secure
  • Review your account activity regularly
  • Report any suspicious activity to us immediately

Security Incidents

If a security incident affects your personal data, we will notify you promptly in accordance with applicable laws. We will explain what happened, what data was involved, and what steps you should take.


Limitations

No system is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. We continually work to improve our security practices as technology and threats evolve.


Questions About Security

If you discover a security vulnerability or have questions about how we protect your data, contact us at privacy@zirzoner.com.