How Zortal looks after your data
What we protect, who can see what, and how to get your data back or delete it — in plain terms.
How we protect it
Encrypted in transit and at rest
Every connection to Zortal and to your published site uses HTTPS. Your database and files are encrypted at rest by our storage providers.
Secure sign-in
Passwords are stored only as a one-way hash, never in plain text. New accounts confirm their email, or you can sign in with Google. Sessions end after 7 days without use, and repeated sign-in attempts are slowed down.
Only the people you invite
A site is open to its owner and the editors they invite. Every request is checked against that site before any data comes back.
We never see your card
Payments run on Dodo Payments’ hosted checkout. Your card details go straight to them and never reach Zortal.
Uploads go straight to storage
Files upload directly to storage through short-lived signed links, with type and size checks, and are served from a separate domain from your account.
No ads, no selling
We don’t sell your data or use it for advertising. We use it to run your sites and your account.
Who can see what
You and your editors
Everything in the sites you own or were invited to edit.
Your website visitors
Only your site’s public pages — the live site and its preview address. Studio, Messages and form submissions stay private to you.
AI providers
When you build or edit with AI, your messages and the site content they need are sent to our AI providers to produce the result — nothing more.
Where your data lives
Stored securely
Your account, sites and files live with established cloud providers for database and file storage, encrypted at rest.
Shared only to run Zortal
Service providers get only what their job needs: hosting and building your site, AI features, payments, email, and analytics on Zortal’s own pages.
Your published site stays clean
Sites built with Zortal carry no analytics or tracking scripts. Your visitors see your site, nothing else watching.
How we use and share information is set out in our privacy policy.
Your data, your call
Get a copy
Email hello@zortal.io and we’ll send you an export of your data.
Delete your account
Ask by email and we delete your account, sites and files within 30 days. How deletion works
Report a security issue
Found something? Email hello@zortal.io with “Security issue” in the subject. We’ll look into it and keep you updated.
Security FAQ
Build your site on solid ground
Free to build and preview. No credit card needed.