Last updated: October 14, 2026
Controls described as of: October 14, 2026
Clients pay creators outside SettleQuik. SettleQuik does not receive, hold or process those payments. We do not ask for your bank-login or payment-app password.
We encrypt in our database the details a creator saves for each payment method, including Bank Transfer account and routing numbers and SEPA IBANs. When a creator adds a Bank Transfer or SEPA payment method to a page, visitors who open that payment method can see the details needed to pay the creator. Encryption at rest does not mean those creator-published payment instructions are hidden from visitors.
Changes require a signed-in account with permission to manage the relevant creator page. On the Agency plan, an authorized agency administrator may manage a creator's methods within the administrator's permitted scope; each creator's payment methods remain separate.
Before adding a payment method or changing its destination details, we ask you to confirm it is you. An account with a password uses that password; an account using a supported third-party sign-in method without a password uses an emailed code. Confirmation on one session does not count for another. Renaming, enabling/disabling or reordering a method without changing its destination does not require this confirmation.
When a payment method is added, changed or removed, we send an email identifying the device involved and an alert to devices where you have enabled alerts. These security emails cannot be switched off.
Contact buttons keep the email address or telephone number off the displayed page, but the destination app or service may reveal it when someone uses the button. Use a separate business number if you do not want WhatsApp contacts to see your personal number.
Changing or resetting your password, enabling two-factor sign-in or confirming an email-address change ends your other sessions. Settings → Security lists signed-in devices, and “Sign out everywhere else” ends sessions other than the one you are using.
Without “Keep me signed in,” a session ends after 30 minutes of inactivity or 12 hours at most. With it selected, a session can last up to 30 days and ends after 14 days of inactivity.
You can enable two-factor sign-in with an authenticator app or emailed codes in Settings → Security. We encrypt authenticator-app secrets in our database. Passwords and recovery codes are stored as one-way hashes. Repeated sign-in and password-reset attempts are rate-limited.
Changing an email address requires confirmation at the new address, and we notify the old address.
Administrators use a password and authenticator-app sign-in. Admin screens do not display password hashes or authenticator secrets. Account-data exports are restricted to Super Admins.
On Pro and higher plans, we check Venmo, PayPal.me and Cash App links daily and email you if a check identifies a link that has stopped working. This is a link check, not verification of a payment or the seller's performance.
We use framing restrictions on our sign-in and account pages to reduce the risk of clickjacking. This is one protective control; it does not make those pages immune from all security risks.
Follow How to protect your account, then email [email protected] from the address on your account. If you cannot access that address, tell us when contacting support; do not send passwords or recovery codes.
For a suspected technical vulnerability, email [email protected] and read our Vulnerability Disclosure Policy for permitted research and reporting.
“Report this page” is for reports about creator-page content or conduct. It is not the channel for technical vulnerability reports.
Where applicable law requires notice of a security incident, we will provide the required notice.
For data practices, see our Privacy Policy. For service terms, see our Terms and Conditions.
SettleQuik LLC
9905 S Pennsylvania Ave Ste A, Oklahoma City, OK 73159
Email: [email protected] | Phone: 572-241-5592 | DMCA Notice & Takedown Policy
