Privacy Policy
What we can and cannot see
Inspection content (end-to-end encrypted)
Your inspection reports, findings, narratives and photo captions are end-to-end encrypted. They are encrypted on your device before upload and remain encrypted on our servers, and we do not hold the keys that decrypt them. A breach, a subpoena or an acquisition of the data we store does not make your inspection content readable. Because we also serve the app you use, this protection also depends on nobody changing the app to capture content in your browser; our security page explains this limit. Report PDFs are generated on your device and are never stored.
Photos (not end-to-end encrypted)
Photos you upload are not end-to-end encrypted. They are stored at randomly-generated, unguessable object keys under standard server-side encryption at rest (AWS managed keys). Our servers know which inspection a photo belongs to, and so which property, and which checklist item; what you wrote about it, the finding and the caption, is in the encrypted report. A photo whose contents show a house number, a piece of mail, or similar detail still identifies itself, however. This is a deliberate product decision; see our security page for the reasoning.
Operational data (standard SaaS)
Operational data, meaning who you are, your jobs, clients, agents, billing and scheduling, is standard SaaS data: encrypted in transit (TLS) and at rest (AWS managed keys), but readable to us. We need to read it to run the platform. This includes an access log: when a report, or a photo in it, is opened, we record who opened it, when, and from which IP address and browser, and we show that log to the inspector who wrote the report. We also record the IP address a sign-in link was requested from, to limit abuse.
Your recovery phrase
When you sign up, you receive a 12-word recovery phrase (BIP39 standard). This phrase deterministically derives your vault encryption keys on your device. We never see this phrase. It is never transmitted to our servers and never stored with us. If you lose it, we cannot recover it; by design.
How we use your data
- To provide and operate the platform
- To authenticate your sessions and protect your account
- To process payments and billing
- To communicate service updates and support
- To comply with legal obligations
Your rights
Which rights apply to you depends on where you live (for example under the GDPR or the CCPA). That part of this policy is being finalized with counsel.
What you can do today, wherever you live: the account owner can export a copy of the account’s data and close the account from Settings, and you can ask us about the data we hold through support.
Contact
Questions about this privacy policy? Contact support.