Trust & Security

Accounts are protected with email and password sign-in, with optional Google single sign-on. Sessions are managed by our authentication provider and access tokens are stored in your browser, scoped to this site.

Sensitive actions (listing changes, offers, escrow, role assignments) require an authenticated session and are checked server-side on every request.

Every user-data table enforces row-level security: users can only read and write the rows they own. Roles are stored in a dedicated table and verified server-side — they cannot be elevated from the browser.

Listings can only be edited by the assigned agent or an administrator, and ownership of a listing cannot be transferred from the client side.

The application runs on managed cloud infrastructure with TLS/HTTPS for all traffic. Database, authentication, and storage are provided by our backend platform; secrets and service keys are kept on the server and never shipped to the browser.

Lovable platform capabilities are used as-is; this statement is not a Lovable certification or independent audit.

We collect the account information you provide (name, email, role), the listings and inquiries you create, and operational metadata needed to run the service (timestamps, message threads, transaction state). We use this data to operate the marketplace, connect buyers, sellers, and agents, and improve the product.

We do not sell personal data. For specific retention windows or a copy/deletion of your data, contact us using the address below.

We use cookies and local storage strictly to keep you signed in and to remember your preferences. Any analytics we run is aggregated and used to improve reliability and usability of the platform.

If you believe you have found a security vulnerability or a privacy issue, please email us before sharing details publicly. We will acknowledge your report and work with you on a fix.

security@ngpropertyhub.com

New Guard Property Hub secures the platform, the application, and the data it stores. You are responsible for keeping your account credentials private, using a strong password, and reviewing transactions before approving them. Third-party services you choose to connect (e.g. payment processors) operate under their own terms.