Security & data
Your data, handled with care.
This page describes current security and data-handling practices. It is app-owner editable content and is not an independent certification.
Encryption
All traffic is served over HTTPS (TLS 1.2+). Credentials and access tokens are stored using industry-standard hashing.
Hosting & subprocessors
The platform runs on Cloudflare (edge) and Supabase-managed Postgres (EU/UK region primary). AI features route via Lovable AI Gateway. A full subprocessor list is available on request via /contact.
Access control
Row-level security is enabled on every user-facing table. Admin access uses role-based checks via a dedicated user_roles table; there is no admin flag on user profiles.
Data subject rights (GDPR / UK GDPR / DPDP)
Users can request export, correction or deletion of their personal data by emailing privacy@byhomeowner.ai. We respond within 30 days.
Incident reporting
Suspected vulnerabilities or incidents: security@byhomeowner.ai. We review every report as soon as we can. Please do not test against production without permission.
Where our data lives
UK platform, consistent standards
Primary database and file storage run in the EU/UK region. Cloudflare edge terminates TLS for low-latency access in the market below. Encryption, access control and RLS policies apply to every listing and account without exception.
| Market | Region | Status |
|---|---|---|
| United Kingdom | Europe | Now onboarding |
Collaboration is our anti-scam strategy
Owners, agents, developers and service partners work together on one shared network — not against each other in fragmented back channels. That's how we starve scams of the confusion they rely on, and how every listing ends up with a clear audit trail behind it.
Shared responsibility
We provide the platform controls above. Users are responsible for choosing strong passwords, enabling multi-factor authentication where offered, and keeping their account details up to date.