Security & Safety

1. HTTPS & Transport Layer Security (TLS)

100% of network communications between client web browsers, mobile applications, and Zungal backend APIs are encrypted using modern cryptographic protocols (TLS 1.3). All plain-text HTTP connections are automatically redirected to secure HTTPS.

2. PostgreSQL Row Level Security (RLS)

Our database architecture enforces database-level Row Level Security (RLS) on PostgreSQL. Private records, authentication credentials, and user draft data can only be accessed by verified account holders. Role-gated workflows are verified against strict server-side authorization policies.

3. Passwordless OTP & Google OAuth 2.0

Zungal avoids storing static plain-text user passwords. Authentication is powered by time-limited, single-use email verification codes (OTP) and Google OAuth 2.0 authentication, mitigating credential stuffing, brute force, and password leak risks.

4. Verification Data & Identity Isolation

Administrative verification materials (such as official authorization letters and shop photos) are kept in secured, private storage buckets accessible strictly to authorized administrators during manual review. Zungal does not require or collect Aadhaar, PAN, or Voter ID cards.

5. Edge Defense & Infrastructure Protection

High-availability edge networks provide automated DDoS mitigation, web application firewall filtering, and secure distributed caching to prevent denial-of-service disruptions.

6. Responsible Vulnerability Disclosure

Security researchers and users are encouraged to report potential security vulnerabilities or data risks responsibly to support@zungal.com or our statutory grievance desk at grievance@zungal.com.