Data Privacy and Security FAQ

How ZZMEDIA protects your data and maintains security.

How is my data protected?

Your data is stored in a managed Supabase (PostgreSQL) database with:

• Encryption at rest — Data is encrypted on disk
• Encryption in transit — All connections use HTTPS/TLS
• Row Level Security — Database-level access controls
• Regular backups — Automated database backups

Who can access my data?

Only authorized users can access dashboard data. The system uses authentication (via NextAuth) to verify identity before granting access. Each user sees only the data they're authorized to view.

How are integrations secured?

Third-party integrations (Stripe, Plaid, Google) use OAuth 2.0:

• Your credentials are never stored in the dashboard
• Only encrypted access tokens are retained
• You can revoke access at any time from the Integrations page
• Each integration requests only the minimum permissions needed

Is my payment information safe?

Payment processing is handled entirely by Stripe — a PCI DSS Level 1 certified payment processor. The ZZMEDIA Dashboard never stores credit card numbers or sensitive payment details.

How does Plaid handle my bank data?

Plaid is a bank-level secure service used by major financial institutions. Your bank login credentials are processed by Plaid and never stored in the ZZMEDIA Dashboard. Only transaction data and account balances are synced.

Can I delete my data?

Yes. Contact the administrator to request data deletion. You can also export your data before deletion using the Backup/Export feature.

What about email compliance?

ZZMEDIA follows CAN-SPAM requirements for email communications:

• Truthful subject lines
• Clear opt-out mechanism
• Physical business address included
• Unsubscribe requests honored within 10 business days

Do you share my data with third parties?

Your data is not sold or shared with third parties for marketing purposes. Data is only shared with the integration services you explicitly connect (Stripe, Plaid, Google, QuickBooks) and only for the purpose of providing those services.