Security
Effective: September 7, 2026
Security is a shared responsibility. This page summarizes the safeguards and responsibilities that apply to KUSTOM KO accounts and product data.
1. Security approach
KUSTOM KO uses layered controls intended to protect account and Customer Data confidentiality, integrity and availability. Controls are selected based on the nature of the Service, likely risks and the capabilities of our infrastructure providers.
2. Identity and access
Access is authenticated and tied to user identities. Organization membership, product entitlement, role and seat assignment are intended to limit what each user can access. Administrators are responsible for timely invitation, role and offboarding decisions.
3. Data protection
Data is transmitted over encrypted HTTPS/TLS connections. Our hosting/database providers may encrypt stored infrastructure data at rest. Application-level authorization and database security policies are used to separate user and organization access where supported.
4. Payment security
Payment collection is handled by Stripe. KUSTOM KO does not intend to collect or store full card numbers or card verification codes in its application database.
5. Operational safeguards
We use measures such as restricted administrative access, logging, dependency updates, environment separation where appropriate, secure secrets handling and review of security-sensitive changes. No security program eliminates all risk.
6. Customer responsibilities
Use strong unique passwords, keep devices and browsers updated, protect email accounts, do not share credentials, review administrator assignments, promptly remove departed users and maintain independent backups of critical operational records or source files.
7. Security incidents
If we determine that a security incident affects personal information or Customer Data, we will investigate, contain and remediate as appropriate and provide notifications when required by applicable law or contractual commitments.
8. Vulnerability reporting
If you believe you found a security vulnerability, contact contact@kustomko.com with enough detail to reproduce the issue. Do not access data that is not yours, disrupt the Service, or publicly disclose an unresolved issue before allowing reasonable time to investigate.
9. No absolute guarantee
Security information is provided for transparency and does not constitute a warranty that the Services are immune from every threat, outage, compromise or loss.