1How we protect information#
- Encrypted connections (HTTPS) between the apps, website and our servers.
- Payments through Stripe and PayPal with tokenised cards — no card numbers on ZUKA servers.
- Secure sign-in, including Google and Apple sign-in.
- Role-based access, so staff, vendors and drivers see only what their role needs.
- Audit logs of sensitive actions, backups, and review of access rights.
- Security checks when we choose service providers.
We publish claims about certifications, audits or specific standards only once they have been verified.
2Report a security issue#
If you find a vulnerability or suspect your account has been compromised, email legal@zukaongo.com with “Security” in the subject. Please don’t access other people’s data or disrupt the service while testing.