Portal privacy & access.

What the portal stores

Musaru uses this workspace to manage its business, project work, tasks, enquiries and support reports. Client reports can contain the description you enter, the affected project, steps to reproduce, an optional page address, screenshots, comments and status updates. Approved contact emails and business memberships control access.

Who can see a report

Musaru’s owner can manage the workspace. Approved client users can see reports and shared updates for the business or businesses assigned to them. They cannot access other clients, Zen’s task list, sales enquiries, private commercial details or internal report notes.

Sign-in and security information

An essential session cookie keeps you signed in. Email sign-in codes expire after 10 minutes and can be used once. Sessions expire after eight hours. Short-lived security counters use keyed hashes to limit sign-in abuse; raw IP addresses are not stored in the portal record file. The hosting provider may keep its own technical access logs.

Storage and screenshots

Portal records, security data, rolling backups and uploaded screenshots are kept in a private folder outside the public website directory. Screenshots require an authorised account to download. Please exclude passwords, payment-card details and private student or customer records. Use technical descriptions and non-sensitive examples where possible.

Use of AI and email

The portal does not automatically send reports, screenshots or business records to AI services. Sign-in emails contain a short-lived access code. Adding a client account does not automatically email an invitation. Report updates remain in the portal; the current version does not automatically send client reply emails.

Keeping records up to date

Records are kept to manage ongoing work and the history of reports. Zen can export a private backup, complete tasks, close reports and disable client access. Contact zenmahmood@gmail.com if your details need correcting or you want to discuss removing a record. Keep downloaded exports private.