Private by design.
What happens to your clients’ information, in plain words. If your managing broker has questions, send them this page.
Two-step codes on new devices
Agents and buyers get a 6-digit code by email the first time they sign in on a new phone or computer.
Buyers’ passcodes
The last four digits of their phone, or a password they choose. Wrong tries pause sign-in for that portal, and a one-time link by email is always available.
Lockouts and alerts
Too many wrong passwords lock sign-in for an hour on new devices. The account owner gets an email for every new-device sign-in and every lockout.
Sign out everywhere
One button signs out every other device, for an agent or for a client’s portal.
Agents are walled off
Every client belongs to one agent. Every page checks that on the server, so agents never see each other’s clients.
Private photos and files
Photos, disclosures, and reports are shown only after sign-in, never from a public address.
Never in search results
Every portal page tells search engines not to index it.
Fair Housing guardrails
Wish lists and objectives describe the home, not the people. Wording about neighbors or who lives nearby gets a gentle note.
Stored outside the website folder
The database and files live in a private folder the web server can’t hand out.
Hourly encrypted backups
Kept for 14 days and locked with a passphrase. The server keeps only the public half of the key, so even the server can’t read old backups.
Undo an upgrade
Each new version saves a copy of the database before it changes anything.
A daily self-check
The portal tests its own setup every day and flags anything that needs attention.
Strict browser security
A tight Content Security Policy, HTTPS everywhere with HSTS, no framing by other sites, and cross-site form posts refused.
Safe uploads only
Photos, PDFs, Office documents, audio, and video, checked by their actual contents. Programs, scripts, and macro files are always refused.
Email from Google Workspace
Messages send through Google’s mail servers with your name, and replies come straight to you.
Payments by Stripe
Hopstone Home never sees or stores a card number.
Questions we didn’t answer?
Email hello@hopstonehome.com and you’ll hear back from a person.