KONAHHow we look after your data.
Agents trust KONAH with listing photos, client contacts and contract dates. Here is, in plain English, how the platform protects them: what we store, what we don't, and who can see what.
Your account.
- Passwords are never stored. We keep a salted PBKDF2-SHA-256 hash with 100,000 iterations, so even we can't read your password.
- Sessions use secure, HTTP-only cookies that scripts on the page can't read.
- Sign-in is rate-limited per account and per network, which blunts password-guessing.
- Password resets go only to the email on the account, and resetting signs out other sessions.
Who sees what.
Every permission is checked on our server, not just hidden in the page. A client sees only their own orders, files and CRM. A KONAH Creator sees only the jobs assigned to them, and never a client's payment details. A brokerage sees which agents joined and booked, never their orders, addresses, files, messages or CRM. Share links you create (a seller gallery, a property website) can be reset or turned off at any time.
Payments.
Payments run through Stripe. Card details are held by Stripe, never by KONAH: we keep amounts, payment status and a Stripe customer reference, and we never see or store your full card number. KONAH Creators and sales reps give their tax and bank details to Stripe directly, too.
Your photos, files and data.
- Storage: order files live in KONAH's Cloudflare R2 storage. Downloads go out as signed links that expire after a few hours.
- Backups: the database is backed up every night.
- Connected accounts: when you disconnect Instagram, Facebook or TikTok, we delete that platform's access token right away.
- Export and delete: download a copy of your data (Team & Account → Your data) or delete your account from your portal at any time. Deleting removes your profile, brand kit, contacts, documents, social connections and preferences.
- Transport: the whole site is served over HTTPS with HSTS, and pages can't be framed by other sites.
CRM and software.
Contacts, messages and documents in KONAH CRM, the AI Transaction Coordinator and KONAH Hello belong to the account that created them. The AI Transaction Coordinator reminds you to verify wiring instructions by phone and is not legal advice. KONAH AI drafts never post or send by themselves: social posts wait for your approval. Internal test accounts are marked and kept out of real reports and money.
Full details are in our privacy policy and terms. Found a security problem? Email [email protected] and we'll respond quickly; please don't test against other people's accounts.
Questions, answered.
Does KONAH store my card number?
No. Card details are held by Stripe. We keep amounts, status and a Stripe customer reference only.
Can my brokerage see my orders or CRM?
No. A brokerage sees membership and booking status only, never your orders, addresses, files, messages or contacts.
How do I delete my account?
From your portal: Team & Account → delete account. Settle any open invoice first. You can download your data before you go.
Who can open my listing photos?
You, the KONAH team working on the order, and anyone you send a share link to. You can reset or turn off share links at any time.
Book it in two minutes.
Pick a package, pick a time, pay securely. Your photos land in your KONAH portal within 24 hours of the shoot.