Security

Protecting your information is a priority. This overview describes the principal safeguards we use. It is provided for transparency and does not modify our Privacy Policy or Terms of Use. No system is perfectly secure, and we cannot guarantee absolute security, but we apply current, reasonable measures across the Service.

Account security

• Multi-factor authentication. Accounts are protected with multi-factor authentication, so a password alone is not enough to sign in.
• Strong password storage. Passwords are hashed with a modern algorithm (Argon2) and are never stored or transmitted in plain text.
• Protected sessions. Sessions use secure, HTTP-only cookies and can be revoked. Repeated failed sign-in attempts are throttled to deter brute-force attacks.

Data in transit and at rest

• Encryption in transit. All traffic is served over HTTPS (TLS), with HTTP Strict Transport Security enforced.
• Access-controlled storage. Your documents — including your ID, lease, and shared files — are stored through access-controlled storage and are visible only to you and the Landlord.

Payments

Payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. We do not store your full card or bank-account numbers; that sensitive payment data is handled directly by Stripe.

Infrastructure and monitoring

• The Service runs on a hardened, firewalled server with automatic security updates and intrusion-prevention measures.
• Cross-site request forgery protections and a restrictive content-security posture guard the application layer.
• Key actions are recorded in an audit log, and database backups are taken regularly.

Reporting a concern

If you believe your account has been compromised or you have discovered a security issue, please contact us promptly at nateandmelaniehawaii@gmail.com. In the event of a breach affecting your personal information, we will notify you and applicable authorities as required by Hawaiʻi Revised Statutes chapter 487N and other applicable law.