How we protect your information
Last updated June 24, 2026
You trust us with your address and details about your home. Here’s plainly how we keep that safe — we’re a small product, so this describes what we actually do.
Encryption
All traffic to AppealKit runs over HTTPS (TLS), so your information is encrypted in transit. Your data is stored in a managed database (Supabase) that encrypts data at rest.
Hosting and access
We build on Vercel (hosting) and Supabase (database), established cloud platforms that undergo independent security audits. Changes to our database happen only on our servers using a key that is never exposed in your browser — so your browser never holds the credentials that can modify our data.
We collect as little as possible
The free over-assessment check needs no account and no email — it runs through an anonymous, server-side session. You share an email only if you create an account to file. We don’t sell your data; see our Privacy Policy for details.
Payments
Payments are processed by Stripe. Your card details are entered directly into Stripe’s payment form and are never sent to or stored on our servers — we keep only a record of the payment itself: the amount, the date, and what it was for.
Reporting a vulnerability
Found a security issue? Report it through our contact form. We welcome good-faith reports and won’t pursue action against researchers who avoid privacy violations and data destruction and give us a reasonable chance to fix the issue before disclosing it.