Last updated October 12, 2026
Every connection to ContactKickstart is encrypted in transit with TLS, and strict transport security keeps browsers from ever downgrading. Your data is stored in a managed PostgreSQL database that encrypts data at rest.
Accounts are isolated at the database layer with row-level security: every query runs under your identity, and the database itself refuses to return another account's rows. Public card pages go through a small set of fixed, audited functions rather than open database access, and those functions validate and rate-limit everything they accept.
Photos and card images live in a private storage bucket. Contact photos are readable only by the account that captured them; card images are served through short-lived signed URLs.
Payments are processed by Stripe, a PCI DSS Level 1 certified provider. Your card number never touches our servers — we store only the subscription reference Stripe gives us, and every billing notification from Stripe is cryptographically verified before we act on it.
We collect only what the product needs (see the privacy policy for the full list), and we don't sell your data. You can export your contacts at any time (CSV or vCard from the app), and you can delete your account yourself from Settings — deletion removes your cards, contacts, photos and account data. For any other access, correction or erasure request, email support@myaisummit.dev and we'll handle it promptly.
We use a short list of subprocessors to run the service: Supabase (database, authentication, file storage), Cloudflare (hosting and delivery), Stripe (payments), and Anthropic (AI processing — the card image or text you ask us to process, used only to produce your result).
Our security controls are modeled on the SOC 2 Trust Services Criteria — access control, encryption, change management with automated checks on every change, and least privilege throughout. ContactKickstart has not yet completed an independent SOC 2 Type II audit; formal certification is on our roadmap as the company grows. If your organization needs our current security documentation for a vendor review, email support@myaisummit.dev.
If you believe you've found a security issue, email support@myaisummit.dev with the details. We read every report and act on them quickly.