Your Data Is Your Business
Your estimates hold your real costs, your margins and your clients' details. That's sensitive information, and we treat it that way.
This page explains the protections QuickEstimate has in place today, and what you can do to keep your own account secure.
Our Security Measures
These are the protections built into QuickEstimate for every account, on every plan.
Encrypted Connections
Everything you send to and receive from QuickEstimate travels over an encrypted connection.
- Every page and request uses HTTPS (TLS 1.2 or higher)
- HTTPS is enforced across the whole site, so your browser never falls back to an unencrypted connection
Protected Passwords and Sign-In
Your password is never stored in a form anyone can read, and the sign-in page is protected against guessing.
- Passwords are stored only as one-way hashes, never in plain text. Not even our team can see your password
- Passwords must be at least 8 characters
- After 5 failed sign-in attempts, further attempts are blocked for 15 minutes
- Password reset links expire after 1 hour and work only once
- You can also sign in with Google, so your Google account's own protections apply
Team Permissions
You decide who on your team can see and change what.
- Each team member has a role, and roles control which areas of QuickEstimate they can use
- Only account admins, or team members you've given team-management permission, can add or deactivate users
- A deactivated team member can no longer sign in, and their past work stays in your account
See Managing Account Access and Passwords for step-by-step instructions.
Secure Payments
Card payments, for your subscription or from your clients, are handled by Stripe.
- Card details are entered into Stripe's secure payment form and go straight to Stripe
- QuickEstimate never receives or stores full card numbers
US-Based Hosting
QuickEstimate is a US company, and your data is hosted on servers located in the United States.
- The service is hosted with Hostinger on US-based servers
- Each company's estimates, clients and pricing are kept separate from every other account
What We Never Do With Your Data
- We never sell your data
- We never use your estimates, pricing or client information for advertising
- We never share your data with other QuickEstimate customers
- Our team only looks at your account data when it's needed to help with a support request or to keep the service running
Full details are in our Privacy Policy.
Keep Your Own Account Secure
Security is shared. These habits close the gaps that software alone can't.
Use a Strong, Unique Password
Use at least 12 characters and don't reuse a password from another site. A password manager makes this easy.
Protect Your Email
Password resets go to your email, so whoever controls your inbox can reset your password. Turn on two-step verification with your email provider.
Give Team Members Only What They Need
Choose the narrowest role that lets each person do their job.
Deactivate Leavers Right Away
When someone leaves your business, deactivate them under Users the same day. Their work stays, their sign-in stops.
Watch for Phishing
QuickEstimate will never ask for your password by email. If a message claiming to be from us looks suspicious, don't click its links. Forward it to support.
Log Out on Shared Devices
Always sign out when you use QuickEstimate on a shared or public computer, and don't let the browser save your password there.
Frequently Asked Questions
On servers located in the United States, hosted by Hostinger. QuickEstimate is a US-based company.
Our team only looks at account data when it's needed, for example to investigate a problem you've reported or to keep the service running. We never sell or share your data.
Not yet. You can sign in with Google, which lets you use your Google account's own two-step verification. Otherwise, use a strong, unique password.
No, QuickEstimate doesn't currently hold a SOC 2 report. This page lists the protections we have in place today. If your company needs a security questionnaire completed, contact support.
All card payments are processed by Stripe, a PCI DSS Level 1 certified payment processor. Card details go straight to Stripe. QuickEstimate never receives or stores full card numbers.
Contact support to close your account and ask for your data to be deleted.
Email support@quickestimate.io with a description of what you found. Please don't share details publicly until we've had a chance to fix it.
Still Have Security Questions?
Our team is happy to explain how we protect your data.