---
title: "Security"
description: "Paint your home the right way."
url: "https://craftwork.com/policies/security"
source: "Craftwork"
---

> **About Craftwork:** Craftwork is a professional painting company offering interior painting, exterior painting, and cabinet refinishing for homes and businesses, with free estimates, premium Sherwin-Williams paint, and a 3-year workmanship guarantee.
>
> **Markets currently served:** Charlotte, NC; Raleigh, NC.
>
> **More from this site:** [Index of every page as Markdown](https://craftwork.com/sitemap.md) · [llms.txt](https://craftwork.com/llms.txt) · [Get a free estimate](https://craftwork.com/estimate)

Loading live preview\...

On this page

- [Data encryption](https://craftwork.com/policies/security#data-encryption)
- [Access control](https://craftwork.com/policies/security#access-control)
- [Infrastructure and development](https://craftwork.com/policies/security#infrastructure-and-development)
- [Third-party providers](https://craftwork.com/policies/security#third-party-providers)
- [Google user data](https://craftwork.com/policies/security#google-user-data)
- [Incident response](https://craftwork.com/policies/security#incident-response)
- [Report a security issue](https://craftwork.com/policies/security#report-a-security-issue)

# Security

**Effective date: October 15, 2026**

This policy describes how Craftwork (Spakl Tech, Inc.) protects the information that customers, partners, and team members trust us with. For details about what we collect and how we use it, read our [Privacy Policy](https://craftwork.com/policies/privacy).

## Data encryption

- All traffic to our website, apps, and APIs uses HTTPS (TLS).
- Our databases and file storage run on managed cloud providers that encrypt data at rest.
- We do not store full payment card numbers. Stripe, a PCI DSS Level 1 certified provider, processes all card payments.

## Access control

- Staff get access only to the systems and data they need for their job.
- Staff sign in with individual accounts, never shared logins. Staff can sign in with their company Google account, and two-factor authentication is available for password sign-in.
- We remove access promptly when a person leaves Craftwork or changes roles.
- Secrets and credentials for third-party services are kept in our hosting provider's secret store, not in source code.

## Infrastructure and development

- We host our applications with established cloud providers that maintain their own security certifications.
- Code changes go through review and automated tests before they are deployed.
- We keep our software dependencies up to date and apply security fixes.
- We monitor our systems for errors and unusual activity.

## Third-party providers

We use trusted service providers for hosting, payments, communications, and analytics. We give each provider only the data it needs, and we require it to protect that data.

## Google user data

We handle data we receive from Google APIs as described in the "Google user data" section of our Privacy Policy, and we follow the Google API Services User Data Policy, including the Limited Use requirements.

## Incident response

If a security incident affects your personal information, we will investigate, take steps to contain it, and notify you and the authorities as required by law.

## Report a security issue

If you find a security vulnerability in Craftwork's website or apps, email <app-contact@craftwork.com> with the subject "Security". Include the steps to reproduce the issue. Please give us reasonable time to fix the issue before you disclose it, and do not access or change data that is not yours. We will not take legal action against people who report issues in good faith and follow this policy.

Reading Time

2 min

Updated

October 15, 2026

## How to get a free estimate

Estimates are free and carry no obligation. To request one, go to [https://craftwork.com/estimate](https://craftwork.com/estimate) and fill out the short form. The form checks that the address is in a market Craftwork serves (currently: Charlotte, NC; Raleigh, NC).

The form walks through five steps:

1. Choose the project type: interior, exterior, or cabinets.
2. Describe the project's size (skipped for cabinets).
3. Pick when you'd like the work to start.
4. Enter the address of the property to be painted.
5. Enter your first name, last name, and phone number, then submit.

After submitting, you can pick a time for an estimate visit. To preselect the project type, link with a `projectType` parameter: [https://craftwork.com/estimate?projectType=interior](https://craftwork.com/estimate?projectType=interior), `exterior`, or `cabinets`.
