Security

• All traffic is encrypted in transit (HTTPS).
• Sign-in is handled by a dedicated identity provider, not by passwords we store ourselves.
• Team access is role-based: owners, admins, managers and viewers see and do only what their role allows.
• Videos are played through short-lived signed links, so a link doesn’t work for long or for the wrong person.
• API keys are stored hashed, and webhooks are signed so receivers can check they came from us.

If you’ve found a security problem, email hello@quikpitch.co with “Security” in the subject. Please give us a reasonable time to fix it before sharing it publicly, and don’t access other people’s data. We’ll acknowledge your report as soon as we can.

If personal data is affected by a breach, we’ll tell the people and companies affected, and the ICO where the law requires. See the data processing agreement and privacy notice.