Security

Invite-only access

PlayZiBOARD is for people who already have a PlayZi company account. There is no public registration. An administrator creates and removes access in Playzi HR. Signing in here does not create a new account.

How sign-in works

• Email and password, or Continue with Google.
• Passwords are checked by Supabase Auth. PlayZiBOARD does not store your password.
• A session cookie keeps you signed in. Use Sign out on a shared computer.
• Forgot password sends a reset link only when the address belongs to the team. The page does not reveal whether an email is registered.

How work is separated

Every request for board data runs with your own sign-in token. Database rules limit rows to your company and to workspaces you belong to. Private workspaces stay with their members. Company-visible workspaces can be read inside that company, and edits still require membership. Password reset uses a server key only to create the recovery link, then Brevo sends the email. That key is not used to read boards or HR records.

The people list shows name, department, position, and role. It does not expose payroll, attendance, or other HR records stored in the same company database.

What we expect from you

• Use your company email. Do not share your password or session.
• Leave Remember this device off on a computer you do not control.
• Sign out when you finish on a shared device.
• Put client and project detail on the board only for people who should see it.

If something looks wrong

If you see boards, people, or files that are not yours, or you suspect someone else used your account, sign out and tell your company administrator. They can reset access from Playzi HR. Reset your password from the sign-in page before you continue.