Get Started

Security

Your home information
should stay private.

Property Station is built to protect the records, documents and details you keep about your home — and to give you control over who can see them.

We’d rather explain exactly what we do than hide behind vague security language.

Home paperwork, a warranty booklet and a phone laid out on a kitchen table
Your home.
Your information.
Our priority.

  • Private by default

    Your documents and photos aren’t publicly accessible.

  • Your account is separated from others

    Database rules restrict access to the records associated with your account.

  • Encrypted in transit and at rest

    Property Station uses HTTPS, and our database and storage provider encrypts your data.

  • You control sharing

    Information is only shared when you choose to share it.

How we protect your information

Simple. Strong. Transparent.

We use industry best practices and proven technology to help keep your home information safe.

  • Your account is separated from other accounts

    We use database-level access rules so a signed-in user can only retrieve information they are permitted to access.

    Technical details
    • Every table that holds customer data is protected by row-level security rules in PostgreSQL.
    • The database enforces those rules on every request. Application code cannot forget to check.
    • Automated tests try to read and write across accounts, and across builder organizations, on every change.

  • Your documents aren’t sitting on a public link

    Files and photos are stored privately. When the app needs to display one, Property Station creates a temporary link that expires.

    Technical details
    • Documents and photos live in private storage buckets with the same per-account access rules. Nothing you upload has a public URL.
    • When you open a file, the app issues a link that works for one hour and then stops.
    • Share links you turn on yourself show property details, systems and rooms. Files stay private unless you choose to send them yourself.

  • Encrypted while moving and while stored

    Property Station uses HTTPS when information travels between your browser and our service, and our database and storage provider encrypts stored data.

    Technical details
    • All traffic to and from propertystation.com uses HTTPS. The site tells browsers to refuse insecure connections for two years, including subdomains.
    • Data is encrypted at rest by our database and storage provider, Supabase. Backups are encrypted.
    • The site cannot be embedded inside another website, and every page is served with standard browser hardening headers.

  • Secure sign-in

    Passwords are never stored in plain text, email accounts must be confirmed for certain actions, and sessions use secure cookies.

    Technical details
    • Sign-in is handled by Supabase Auth. You can use Google sign-in or an email and password.
    • Passwords are hashed and never stored in plain text. Password resets go through a time-limited emailed link.
    • New email accounts must confirm their address before they can claim a builder-provided home.
    • Sessions are carried in secure, HTTP-only cookies.

A clean handoff from builder to homeowner

When a builder transfers a home through Property Station, access follows defined handoff rules. Once the homeowner claims the home, the builder’s access to that home record ends.

How the handoff works
  • A builder can only invite a buyer to a home the builder owns.
  • The claim only works for the invited email address, once it is confirmed.
  • Invitations expire after 14 days.
  • After the claim, the builder’s access to that home record ends.
Learn About Property Station for Builders
A newly built home with a covered front porch

Security is checked as we build

Changes go through automated testing before they reach production, including security checks designed to catch account-access and dependency issues.

View technical details
  • Changes reach production only through a protected main branch.
  • Every change runs type checking, linting, unit tests and a production dependency vulnerability audit that must be clean.
  • Security test suites run against a fresh database, including the row-level-security suites that try to cross accounts.
  • An accessibility check and browser tests run against a production build.
  • A security review of the whole platform was carried out in July 2026, and its findings were fixed before the site opened.

What we don’t do.

You can feel good knowing we do not:

  • We don’t use your home information to train AI models.

    Your content remains yours, and we have not authorized our AI provider to train on it.

  • We don’t run advertising or third-party trackers.

    We don’t use analytics trackers that collect personal information.

  • We don’t store your payment card numbers.

    Payments are processed securely through our payment provider.

Backups and recovery

Our database provider maintains regular backups, and Property Station also keeps periodic application-data backups. We continue to test and strengthen our recovery processes as we grow.

Technical details
  • Our database provider takes daily backups, kept for about 7 days. Uploaded files are also copied every night to separate storage with a different provider.
  • We are working toward a rehearsed, timed full-restore drill that includes user accounts and file storage. Until that drill is complete and measured, we do not publish a recovery-time commitment.
  • You can download a copy of your home’s records and files at any time from Settings → Data & Privacy. We encourage you to keep your own copies of documents that matter.

Questions or security concerns?

We’re here.

If you have questions about security or believe you’ve found a security issue, please let us know. Email support@propertystation.com with “Security” in the subject line, and we’ll acknowledge it and keep you informed as we fix it.

Contact Us

Our commitment

Property Station will continue to review, test and improve our security practices as we grow. We’ll always be transparent about how we protect your information and what we’re working on next.

Last reviewed . Our Privacy Policy covers what we collect and who processes it.