Security

Last updated: 14 October 2026

How we protect your account and the Google data you connect to Zoptin.

Access to Google

• Connected through Google’s official OAuth sign-in. We never ask for or see your Google password.
• We request only the Business Profile permission needed to manage your listing.
• You can disconnect at any time, and we then delete the stored tokens.

Account protection

• Passwords are stored only as salted hashes.
• Role-based access: people see only the clients and locations they are assigned.
• Each customer’s data is kept separate from every other customer’s.
• An audit trail records important changes.

Infrastructure

• All traffic uses HTTPS.
• Data is stored in a managed PostgreSQL database with encryption at rest, hosted on Vercel and Neon.
• Payments are handled by a third-party payment provider, so card details never reach our servers.

Reporting a problem

If you believe you have found a security issue, email hello@zoptin.com. We will respond promptly.