Bank-Grade Security

Trusted. Secure. Transparent.

Your data and payments are protected by the same technology used by leading financial institutions worldwide. Here's how we keep you safe.

Payment Methods

We accept all major payment methods

All transactions are processed securely via Stripe. We never store your full card number.

Visa

Built on industry-standard security

TLS 1.3 Encryption

All data in transit is encrypted with TLS 1.3. We enforce HTTPS site-wide with HSTS headers to prevent downgrade attacks.

Encrypted at Rest

Your data stored in Google Cloud SQL is encrypted at rest using AES-256, the same standard used by major banks.

DDoS Protection

Google Cloud Armor shields our infrastructure from distributed denial-of-service attacks and malicious traffic patterns.

Zero Card Storage

We never store your full card number, CVV, or PIN. All payment data is tokenised by Stripe — we only see a masked reference.

JWT + OAuth 2.0 Auth

Short-lived signed JWTs with automatic refresh. OAuth 2.0 flows for third-party logins. Session tokens expire automatically.

Rate Limiting

API endpoints are rate-limited to prevent abuse. Anomalous request patterns trigger automatic blocking to protect all users.

SQL Injection Prevention

All database queries use parameterised statements. Input validation and sanitisation are enforced at every API boundary.

GDPR & CCPA Ready

We collect only what we need. You can request data export or deletion at any time via your account settings or our contact page.

Audit Logs

All critical actions (logins, payment events, data exports) are logged with timestamps and IP addresses for full accountability.

Compliance & Certifications

Verified. Compliant. Trusted.

PCI DSS Level 1

TLS 1.3 Encrypted

Google Cloud Infrastructure

GDPR Compliant

CCPA Compliant

Stripe Payments

Crypto via Coinbase Commerce

256-bit AES encryption at rest

99.99% Uptime SLA on GCP

< 24h Breach notification window

0 Card numbers ever stored

SOC 2 Infrastructure (via Google)

Common Questions

Security FAQ

No. We never sell or share your personal or financial data with third parties for marketing purposes. Data shared with our infrastructure providers (Google Cloud, Stripe) is governed by their enterprise data processing agreements (DPAs), which include strict confidentiality obligations.

Crypto payments are processed via Coinbase Commerce, a regulated and insured crypto payment gateway. We accept Bitcoin (BTC), Ethereum (ETH), and USDC stablecoins. Transactions are confirmed on-chain before subscription activation — typically 1-6 confirmations.

Yes. We offer a 14-day money-back guarantee on all paid plans. If you're not satisfied for any reason within 14 days of your first payment, contact us at support@stanshare.com and we'll issue a full refund — no questions asked.

Your account data is retained for 30 days after cancellation to allow reactivation. After 30 days, personal data is permanently deleted from our systems. You can also request immediate deletion by emailing privacy@stanshare.com at any time.

Never. Your card number, CVV, and expiry are submitted directly to Stripe's PCI DSS Level 1 secure servers. StanShareAI only receives a tokenised reference — the equivalent of a last-4-digits alias — which cannot be used to make charges without Stripe's authorisation.

We run a responsible disclosure programme. If you discover a security vulnerability, please email security@stanshare.com with details. We will acknowledge your report within 24 hours and work to resolve critical issues within 72 hours. We do not take legal action against good-faith security researchers.

Security questions?

Our team is here to answer any questions about how we protect your data and payments.

security@stanshare.com

Data Status