How Zorexa protects your account and data

Account authentication

Zorexa uses email-and-password authentication, plus Google Sign-In if you choose to log in that way. Passwords are never stored in plain text.

1. 1

   Change your password any time from Account → Password.

2. 2

   Forgotten passwords can be reset via the "Forgot password?" link on the login page — a reset link is emailed to your registered address.

Data isolation between businesses

If you manage multiple businesses, or belong to an agency managing multiple clients, each business's reviews, settings, and team members are kept strictly separate at the database level. Team members only ever see the businesses they've been explicitly granted access to.

What Google access Zorexa requests

When you connect Google Business Profile, Zorexa requests permission to read your reviews and publish responses on your behalf. It does not request access to Gmail, Google Drive, or any other Google service, and it never posts anything to Google outside of review replies you've configured.

Data encryption and storage

Data is encrypted in transit (HTTPS/TLS) between your browser, Zorexa, and Google. Your business data is never used to train AI models and is never sold or shared with third parties.

Team access and roles

Every team member is assigned a role (Owner, Admin, Manager, Support, or Viewer) that determines exactly what they can see and do — for example, only Owners and Admins can access billing. See Team & Agencies for the full permission matrix.