Security & trust

Your business data, handled with care.

Here's how the platform is designed to protect you and your customers, in plain language. Some controls depend on the production backend, and we've marked those.

No certification claims. Buildzaro doesn't currently hold SOC 2, ISO 27001, HIPAA or PCI DSS certification. This page describes our design principles and planned controls, not an audit result.

Encryption

HTTPS/TLS everywhere. Data encrypted at rest by the database and storage provider. Production backend

Roles & permissions

Owner, manager, staff and agency roles. Staff can reply to messages without seeing billing. Production backend

Approval-first AI

AI drafts posts, replies and campaigns. Nothing public goes out without approval unless you set an auto-approve rule.

Payments via Stripe

Card data is collected by Stripe's hosted fields and never stored by us. Requires integration

Consent tracking

SMS and email consent is recorded per contact with source and timestamp. STOP/unsubscribe is honored automatically.

Data ownership

Export customers, content and reports any time. Your domain stays yours.

Account security

Planned: two-factor login, session timeouts and an audit log of who changed what. Production backend

Least-privilege connections

We request only the Google and Meta permissions each feature needs, and you can revoke them at any time.

Healthcare caution

Standard forms aren't for health information. Dental and medical clients get guidance on compliant intake tools.

Security FAQ

Are you SOC 2 or HIPAA certified?

No. We don't hold SOC 2, ISO 27001, PCI DSS or HIPAA certifications today, and we won't claim them. Card payments are processed by Stripe, so card numbers never touch our servers. Healthcare clients should not collect health information through standard forms; we'll recommend a compliant form provider.

Who owns my customer data?

You do. You can export your customer list, content and reports at any time, and we delete your data on request after cancellation, subject to legal retention requirements.

Can AI publish things without my approval?

Only if you turn on an auto-approve rule, for example auto-reply to 5-star reviews with no text. Everything else waits in your approval queue.

Found a vulnerability? Email hello@example.com. See also our privacy policy template and data processing template.

See your business online before you decide.

Tell us about your business and we'll build a personalized preview of your website and online presence. Free, no card, no sales call.

PricingSee my site free →