A plain account of how Startnik protects your account, your data and your payments. We only list what is really in place.
Your account
- Passwords are stored only as salted hashes. Nobody at Startnik can read your password.
- You can also log in with a link sent to your email, valid once and for 30 minutes.
- Too many login attempts or sign-ups from one address are blocked for a while.
Your data
- Every page and every connection to your dashboard uses HTTPS.
- Each member sees only their own data. Every action in a dashboard checks that the record it touches belongs to that member.
- Requests people send you are kept for you and are not sent to the AI model.
- Nothing personal is printed into pages that may be stored by a cache.
- Servers are in France (European Union).
Payments
- Payments are handled by Stripe. Card numbers go directly to Stripe and never reach our servers.
- A plan is switched on only by Stripe's own signed notification, or by our server asking Stripe directly — never by what a browser says. Every notification is accepted once, only with a valid signature and only when recent.
- Prices are created by our server, not taken from the page, so a changed page cannot change what you pay.
Limits on our own costs
Every call we make to an outside service (the AI model, the domain registry) passes one gate with a daily ceiling, and stops by itself when a service refuses us or the ceiling is reached. Free plans have their own daily allowance. This keeps a fault or an abuse from turning into a bill — and keeps the service free for those who use it fairly.
Your control
- You can download everything stored for you, and delete your account yourself, in your dashboard under Settings.
- Deleting is immediate in the live system; copies in backups are overwritten in the normal backup cycle.
Found a weakness?
Please tell us at hello@startnik.com before telling anyone else, with enough detail to reproduce it. We answer within a few working days and work with you to fix it. Please do not access other people's data or disturb the service while testing.