Property access data is isolated
Lockbox codes, alarm details, and entry instructions are stored apart from general order records, bounded in time, and kept out of analytics and AI prompts.
Security and trust
Property access is the most sensitive thing we hold.
Real estate media work carries lockbox codes, alarm details, occupancy information, and entry instructions. Those are operational secrets, and the platform treats them that way.
Posture
How sensitive data is handled.
Each item below describes a control the platform implements or is explicitly built to enforce before production credentials are connected.
Role-based access
Customer, photographer, and administrator roles see different records. Authorization is evaluated server-side on every request rather than hidden in the interface.
Private media delivery
Client collections are served through authorized access rather than public links, so delivery does not become an unlisted but permanently open URL.
Audited administrative action
Catalog, pricing, refund, and account changes are recorded so an account can be told who changed what and when.
Privacy-minimized analytics
Conversion events are recorded without property access details or personal contact content, keeping marketing measurement separate from sensitive data.
Explicit provider boundaries
Payments, email, SMS, storage, mapping, and AI run through named provider interfaces so an account can review exactly which processors are enabled.
Data handling
What is collected, and what is deliberately not.
- Booking and quote requestsContact details, property details, and scheduling preferences, retained for the order record
- Property access detailsStored separately from order records, time bounded, audited, and excluded from analytics and AI prompts
- Delivered mediaHeld in private storage and served through authorized access rather than public links
- Conversion analyticsEvent type and page context only, without personal contact content or access details
- AI marketing draftsGenerated from customer-confirmed property facts, with access details excluded from every prompt
- Retention180 days for delivered collections before archival rules apply
Aerial compliance
Drone work operates inside a real regulatory boundary.
Aerial capture runs under the FAA Part 107 commercial small unmanned aircraft framework. Airspace, weather, and site conditions are reviewed before a flight, and aerial coverage is included only where it is legal, safe, and operationally appropriate.
Where conditions do not support a flight, the aerial portion is rescheduled or the order proceeds without it. It is never represented as captured when it was not.
Airspace review
Controlled airspace, temporary restrictions, and site constraints are checked before the appointment.
Condition holds
Wind, visibility, and precipitation can hold a flight. Held sessions are rescheduled, not charged.
Media rights
Licensing is written down before delivery.
The company retains ownership of original works. Photos and videos are licensed to the client for the approved listing or marketing use and may not be redistributed without written consent.
Need this reviewed by legal or IT?
We will walk through data handling, access controls, provider boundaries, and licensing terms with whoever needs to sign off.