Security & data
Your data, handled with care.
This page describes current security and data-handling practices. It is app-owner editable content and is not an independent certification.
Encryption
All traffic is served over HTTPS (TLS 1.2+). Credentials and access tokens are stored using industry-standard hashing.
Hosting & subprocessors
The platform runs on Cloudflare (edge) and Supabase-managed Postgres (EU/UK region primary). AI features route via Lovable AI Gateway. A full subprocessor list is available on request via /contact.
Access control
Row-level security is enabled on every user-facing table. Admin access uses role-based checks via a dedicated user_roles table; there is no admin flag on user profiles.
Data subject rights (GDPR / UK GDPR / DPDP)
Users can request export, correction or deletion of their personal data by emailing privacy@byhomeowner.ai. We respond within 30 days.
Incident reporting
Suspected vulnerabilities or incidents: security@byhomeowner.ai. We acknowledge within one business day. Please do not test against production without permission.
Where our data lives
Global platform, consistent standards
Primary database and file storage run in the EU/UK region. Cloudflare edge terminates TLS globally for low-latency access in the markets below. Encryption, access control and RLS policies are identical in every market — they do not weaken outside the UK.
| Market | Region | Status |
|---|---|---|
| United Kingdom | Europe | Live |
| United Arab Emirates (Dubai first) | Middle East | Rolling out |
| India | South Asia | Rolling out |
| Nigeria | West Africa | Rolling out |
| South Africa | Southern Africa | Rolling out |
| Canada | North America | Rolling out |
Collaboration is our anti-scam strategy
Owners, agents, developers and service partners work together on one verified network — not against each other in fragmented back channels. That's how we starve scams of the confusion they rely on, and how every listing ends up with a clear audit trail behind it.
Shared responsibility
We provide the platform controls above. Users are responsible for choosing strong passwords, enabling multi-factor authentication where offered, and keeping their account details up to date.