How safe is my website and my customers' information?
Your website and your contact form have protections built in. You do not have to set anything up.
What the contact form keeps
When a visitor sends your contact form, I keep three things: their name, their email address, and their message. If your form asks for anything else, I drop it.
The message goes to your business Inbox, inside your account. It does not go on your website, and other visitors cannot see it. I also email you a short heads-up that shows the start of the message, up to about 200 characters. A short message can fit in it whole. See A contact form on your website.
I do not save the visitor's IP address with their message. I use it to stop one sender from flooding your form. Our server logs can also record it for a limited time, as the Privacy Policy describes.
Who can see your messages
Your Inbox is part of your account. In the app, only people who sign in to your account can read it. There are no team logins yet, so today that means only you. See Adding team members to your account.
A small number of ZenBusiness staff can reach stored data to run the service and to answer legal requests. The Privacy Policy covers this. See Terms of Service and Privacy Policy.
How I keep spam out
- A hidden field catches simple bots. A bot that fills it in gets a normal thank-you page, so it does not learn it was caught.
- Each sender can send only a few messages in ten minutes, and a limited number in a day.
- Your form has its own limit too, so a flood from many senders cannot fill your Inbox.
- A very long message is refused before it is read.
If junk still gets through, tell me. I want to know.
Who can change your website
Nobody edits your website by hand. Every change is a new version that I build, and every version goes through the same steps:
- I check the content of your whole site before it can go live. Content that breaks the rules does not publish.
- After your first version, a new version waits for your approval. Nothing changes at your address until you say yes. See Approving website updates.
- Only the exact version you approved can go live. If its content changed after I built it, it does not publish.
If you do not like a change, you can put back any of your last ten versions from Settings → Site. See Rolling back a website change.
Taking your site offline
You can take your site offline at any time, and bring it back. Nothing is deleted. See Taking your website offline.
Secure connection
Your free address always uses a secure connection (https). If someone types it with http, their browser is sent to the secure address. A domain you connect yourself gets the same once its padlock arrives. See Connecting a domain you already own.
What this does not cover
- Your Inbox messages are stored as written. Treat the form like email: ask visitors not to send card numbers or passwords.
- A domain you connect yourself is registered with your own domain provider. Keep that account secure too. See Connecting a domain you already own.
- The Privacy Policy governs what is kept and for how long.