Security at Fast Estimate

All traffic between your device and Fast Estimate is encrypted in transit with TLS (HTTPS). Application data is stored in a managed database with encryption at rest.

Passwords are hashed with bcrypt and never stored in plain text. Sessions use secure, httpOnly cookies that cannot be read by browser scripts. Login is rate-limited: repeated failed attempts temporarily lock the account to block brute-force attacks.

Every account's data is isolated — estimates, customers, and photos are scoped to your account and are never visible to other users. Team member logins are individually credentialed and can be revoked by the account owner at any time.

All payments are processed by Stripe, a PCI-DSS Level 1 certified provider. Card numbers never touch Fast Estimate's servers — we store only a Stripe customer reference.

Job photos and estimate details you submit are processed solely to generate your estimate. We do not sell your data, and we do not use your customer data to train AI models.

Your data is yours. Account owners can export their complete data (profile, customers, estimates, photos, and templates) as a JSON file at any time from Settings, and can request full account deletion by contacting us.

We use a small set of vetted service providers to run Fast Estimate: Stripe (payments), Resend (transactional email), Anthropic (AI estimate generation), and managed cloud hosting for the application and database.

If you believe you've found a security vulnerability, please email us at info@herbergllc.com. We investigate all reports promptly.

Fast Estimate LLC
30 Gould St Suite R, Sheridan, WY 82801
info@herbergllc.com