Account Security Best Practices

Keep Your Account Safe

Protect your account and earnings!

__________________________________________________

Strong Security Habits

Phone Security:

• Keep phone locked
• Strong passcode
• Don't share with others
• Update phone OS regularly

Why Important:

• Phone is your login
• Access to your account
• Contains verification codes

__________________________________________________

Protecting Verification Codes

Never Share:

• SMS codes
• Verification numbers
• With anyone, ever!

Why:

• Someone with code can access account
• No legitimate reason to share
• Shaloz never asks for codes

__________________________________________________

Recognize Phishing

Warning Signs:

• Emails asking for codes
• "Verify your account" texts
• Links to fake login pages
• Urgent language

If Suspicious:

• Don't click links
• Go directly to portal.shaloz.com or app
• Contact help.shaloz.com
• Report phishing attempts

__________________________________________________

API Keys (Businesses)

Keep Secret:

• Never commit to GitHub
• Don't share publicly
• Use environment variables
• Rotate regularly

If Compromised:

1. Delete old key immediately
2. Generate new key
3. Update integrations
4. Monitor for suspicious activity

See Article 2.10 for API key security

__________________________________________________

Payment Security

Protect Payment Info:

• Use secure payment methods
• Monitor transactions
• Review charges regularly
• Report unauthorized charges

Businesses:

• Check delivery fees match
• Review monthly statements
• Set spending alerts

Drivers:

• Verify earnings correct
• Monitor payouts
• Check bank statements

__________________________________________________

Account Monitoring

Regular Checks:

• Review login activity (if available)
• Check payment history
• Verify account details current
• Report anything suspicious

Red Flags:

• Unexpected charges (businesses)
• Missing earnings (drivers)
• Unknown login locations
• Changed account details

__________________________________________________

Logging Out

When to Log Out:

• Shared devices
• Public computers
• When finished
• If suspicious activity

How:

• Click/tap "Log Out"
• Verify next login required
• Account secured

__________________________________________________

Team Member Access (Businesses)

Control Access:

• Only add trusted employees
• Remove when employee leaves
• Limit permissions appropriately
• Monitor team activity

See Article 2.5 for team management

__________________________________________________

Two-Factor Authentication

Built-In:

• Phone verification = 2FA
• Code required every login
• Your phone = second factor
• Automatic security

__________________________________________________

Reporting Security Issues

If Compromised:

1. Contact help.shaloz.com IMMEDIATELY
2. Change phone number if needed
3. Review all recent activity
4. Update payment methods
5. File report if fraud occurred

Quick Response:

• Faster you report, better
• Shaloz can freeze account
• Protect your earnings
• Investigate activity

__________________________________________________

App Security (Drivers)

Keep App Updated:

• Install updates promptly
• Security patches included
• New features
• Bug fixes

App Permissions:

• Only grant necessary permissions
• Location (for driving)
• Camera (for photos)
• Nothing suspicious

__________________________________________________

What Shaloz Will NEVER Do

Never Asks For:

• Your verification codes
• Phone password
• Bank account password
• Social Security Number (except drivers during onboarding)
• Payment by wire transfer
• Gift cards

If Someone Claiming to be Shaloz:

• Asks for these → It's a scam!
• Don't provide
• Contact help.shaloz.com directly

__________________________________________________

Emergency Actions

If Account Compromised:

Immediately:

1. Contact help.shaloz.com
2. Request account freeze
3. Change phone number if possible
4. Review all recent activity

After Securing:

1. Check payment methods unchanged
2. Verify recent orders/deliveries
3. Update all credentials
4. Monitor closely for weeks

__________________________________________________

Need Help?

Security Concerns: help.shaloz.com (urgent!)

Suspicious Activity: Report immediately

Questions: help.shaloz.com