Security & data protection
Built around your trust.
This page covers Kinetic View on the web and the Kinetic View apps for iPhone, iPad and Android, which all use the same protected servers. Your customers trust you with their homes and their information. We take our part in protecting your business records seriously, with private infrastructure, controlled access and clear practices.
Hosting and network boundaries
The web frontend runs on Vercel. The CRM backend runs on Amazon EC2, and the PostgreSQL database runs on Amazon RDS in AWS’s Ohio region. The database is not publicly accessible: its network rules permit database connections from the application server. Administrative SSH access to that server is restricted to an approved IP address.
Encryption
HTTPS protects connections between your browser or the Kinetic View app and our servers. Application connections to RDS require TLS with certificate verification, and RDS database storage is encrypted at rest. Encryption is one layer of protection; account permissions and the way information is used remain important.
Private customer files
CRM uploads, imported attachments and connected Best Estimator proposal PDFs are stored in a private Cloudflare R2 bucket. File routes check the signed-in account and relevant company or record permissions before serving protected files. File transfers are checked for integrity. R2 stores files; customer and job records remain in PostgreSQL.
Company and team access
Company boundaries and role permissions control supported record access and actions. Application database roles do not have superuser or row-security-bypass privileges. Administrators should assign the access each teammate needs, deactivate departed users, and consider the contents of shared notes and attachments when choosing access.
Backups and recovery
RDS automated backups are configured with a 14-day retention period, and database deletion protection is enabled. This is a backup window, not a 14-day lifetime for customer records. Files remain stored while retained by the application; the seven-day orphan-cleanup grace period does not expire saved estimates or PDFs. CRM file overwrites and removals preserve a private recovery copy before replacing or removing the active object. Recovery copies are not a substitute for a complete backup strategy.
Temporary support access
Company administrators can grant and revoke temporary, read-only setup support access. This access expires and records support activity. The support view is limited to supported setup diagnostics; it is not a general-purpose sign-in as your staff. Platform administrators still maintain the underlying service as needed to operate and secure it.
AI and connected services
MCP access is optional, scoped and revocable. Review a connection’s permissions and setup proposals before approving changes. Email, texting, maps, payments and AI features use connected providers when you enable or use those services. Relevant information is processed by those providers under their own terms. Infrastructure protections do not mean data never leaves the application for an authorized integration.
Ongoing care and your responsibilities
We maintain the application and review access controls and deployment behavior. Security requires ongoing updates, monitoring and recovery checks. No online system can promise perfect security. Use a strong, unique password, protect your email account and connected-provider credentials, and only enter information your organization is authorized to use.
Questions or a security concern?
Contact security@kineticview.io. Describe the concern without sending passwords, API keys or unnecessary customer information. For how we process personal information, read our privacy policy.