Trust & Security
Security & Privacy at Settle.
We take the security of your data seriously. All customer data is processed and stored in the United States within our vetted infrastructure and subprocessors, and is never used to train models — ours or any third party’s. This page summarizes how we handle data, our core security practices, and the subprocessors we use.
Data handlingHow we handle your data
What we collect: account information, uploaded content, and usage data necessary to provide the service. What we do with it: deliver and improve our product, monitor system health, and prevent abuse. What we never do: sell your data, share it with advertisers, or use it to train machine learning models (ours or any third party’s). Where data lives: all customer data is processed and stored in the United States.
We are committed to transparency and limiting collection to the minimum necessary for reliable service.
Security overviewCore security practices
Our infrastructure is built on industry-standard, secure cloud services and follows best practices for modern web applications. Hosted on Microsoft Azure (US region) with Postgres (encrypted at rest), all data in transit uses TLS 1.2+, and we have Google SSO, RBAC, and least-privilege internal access controls.
We enforce robust development practices including code reviews, secure SDLC, automated dependency scanning, and use WAF and rate limiting. Centralized logging and monitoring is handled via Sentry. We continually review and upgrade our security posture.
