Passports, health details and payments are the most sensitive things your agency holds. These are the settings that keep them in fewer hands.
Sign in with two factors
Two-factor authentication is optional and recommended for everyone who handles pilgrim data. Each person switches it on for their own account: open your profile, choose Set up two-factor authentication, scan the QR code with an authenticator app and keep the recovery codes somewhere safe. The page shows how to install an authenticator app if you have none.
Collect fewer passport scans
Under Agency Settings → Privacy and security the owner can switch on two options:
- Collect passport details after registration — the sign-up page asks only for names, contact details and a package. Your team adds passport details later, when they are needed.
- Do not collect new passport scans — scan uploads disappear from the panel and the public pages. Passport details can still be typed in or read with Read passport and Scan passports, which read the photo on your own device without storing it.
Neither option deletes scans you already hold.
Who can see what
- Passport and national ID numbers are encrypted in the database.
- Every team member has their own account. On the Professional plan the owner decides per person who may handle money, see finance reports, download files and send messages — see Team & Roles.
- A colleague who leaves is deactivated, not deleted, so what they recorded keeps their name.
- The Activity Log (Professional) records who changed what, with the values before and after.
A downloaded file is outside Ziyara. Give the download permission only to people who need it, and protect the devices those files land on.
Delete what you no longer need
After a trip, the owner can open the finished group and use Delete trip documents to remove passport scans and certificates. A deleted file is gone from daily use; older copies can remain in protected backups until their retention period ends.
Your own data
In Agency Settings, Export My Data downloads what your agency has stored, and Request Account Deletion asks us to close the account. When a subscription ends nothing is deleted by itself: the panel stays readable for 14 days and your records are kept.