Security & data protection
Your records are the business. We treat them that way.
HomeDash holds tenancy agreements, certificates, rent histories, and personal details — the evidence trail your rental business runs on. This page describes, specifically and without marketing gloss, how that data is protected. Last reviewed 21 August 2026.
Encryption, both directions
All traffic between your browser and HomeDash is encrypted with TLS. Your data is stored on a managed database platform that encrypts everything at rest with AES-256 — the same applies to uploaded documents and certificates.
Your data is isolated at the database layer
Every record is scoped to its owner with row-level security enforced by the database itself — not just by application code. A landlord account can only ever read its own portfolio; a tenant can only ever see their own tenancy.
Hardened sign-in
Passwords are hashed with an industry-standard algorithm and never stored or logged in plain text. Signup and login are protected by Cloudflare Turnstile bot verification, rate limiting, and complexity requirements. We never email you a password.
Card details never touch our servers
Payments are handled entirely by Stripe, a certified PCI Service Provider Level 1. We store a billing reference — never card numbers.
Real deletion, on request
When you delete your account, we delete it properly: your database records, uploaded files, authentication identity, and payment-provider customer record. Not a soft-delete flag — removal across every system that held your data.
Responsible disclosure
Found a vulnerability? Email support@homedash.co.uk and we will respond promptly. We ask for reasonable time to fix before public disclosure, and we will credit you if you want that.
Who processes your data
We keep the list of companies that touch your data short, and we name them. We never sell your data and never take commissions or referral kickbacks — HomeDash is funded by subscriptions alone.
Supabase
Database, authentication, and file storage
Vercel
Hosting for this website
Hostinger
Hosting for the HomeDash application
Stripe
Subscription payments
Resend
Transactional email (receipts, notices, account emails)
Brevo
Marketing email — only for contacts who opted in (double opt-in)
Anthropic
AI assistant features — processes only the queries you make
Cloudflare
Bot protection on signup and login (Turnstile)
Analytics on this website (consent-gated), and calendar/document integrations you connect
Meta (WhatsApp Business)
WhatsApp notifications, where enabled
Accountability
HomeDash is a product of Wessex Investment Services Ltd (Company No. 10402782), registered with the UK Information Commissioner's Office (ZB298208). Data protection questions: support@homedash.co.uk. The full picture of what we collect and why is in the Privacy Notice; how we research and publish is in our Editorial Standards.