Trust, Privacy & Security
Last updated: June 2026. This page describes the controls we operate today. It is maintained by HK PropertyIntel and is not an independent certification.
Authentication
Sign-in is handled by our managed identity provider with Google OAuth and email/password. Sessions use short-lived bearer tokens stored only in your browser; we never see your Google password.
Data access controls
Every user-owned record (scans, monitored properties, favorites, profile) is protected by row-level security policies scoped to your account. Other signed-in users cannot read or modify your rows, and unauthenticated visitors cannot read them at all.
Encryption
All traffic to hkpropertyintel.com is served over HTTPS (TLS). Database storage and backups are encrypted at rest by our infrastructure provider.
Payments
Payments are processed by Stripe. Card details are entered directly into Stripe's hosted elements and never touch our servers or database. We only retain the subscription status and the receipt identifier needed for accounting.
Personal information
We collect the minimum required to operate the product: your email address, the addresses you scan, and the properties you choose to monitor. We do not sell personal data, and we do not share it with real-estate agents or brokers.
Transactional and alert emails include a one-click unsubscribe link. Suppressed addresses are honoured globally across alert categories.
Reporting a vulnerability
If you believe you have found a security issue, please email security@hkpropertyintel.com with steps to reproduce. We aim to acknowledge reports within two business days.