How HomeLog handles your data
HomeLog holds invoices with names, addresses and amounts on them, and photographs of the inside of your house. Here is what the system actually does with that, in plain terms.
Your property's data is visible only to people you grant access
Access is a record in its own right: a grant of a role on a property. Every read is filtered by the database itself, not by the application, so a bug in a page cannot expose another household's records.
Uploaded documents are private files, not public links
Receipts, invoices, warranties and photos go into private storage. Nothing has a permanent URL. Each time you open a document we issue a link that works for sixty seconds, after checking your access to that property.
Your private notes are yours, and they do not transfer
Notes and ratings you write about a contractor are stored against your account, not against the property. Nobody else with access to the property can read them, and they do not go to a buyer when you transfer the record. That is a structural property of how they are stored, not a filter we apply at transfer time.
Transferring a property moves the history, not your account
Maintenance history, equipment, remodels, contractor details, warranties and property documents go to the new owner. Your account, your billing details and anything you marked private do not.
A contractor only ever sees the houses they have worked on
Contractors can pay HomeLog for tools that tell them when a system they installed or serviced is due again. That is limited to properties where they have filed work: there is no list of other people's homes, no way to browse addresses by what needs doing, and nothing that lets a company reach a household it has never been to. If that ever changes it will be something you are asked to switch on, not something we switch on for you.
We do not sell your data, and the record stays yours to export
If a subscription lapses, the property record becomes read-only and remains exportable. It is never locked behind a payment or deleted for non-payment.
This is a description of system behaviour, not a legal privacy policy. A formal policy will be published before HomeLog is open to the public.