Security
How we keep your customers' details private
A pool builder's designs carry a homeowner's name and address. We treat them that way.
Your survey images stay on your device
Survey photos and PDFs are stored on the phone or tablet where you added them. They are not uploaded to our servers. The trade-off is that a design opened on another device shows its shapes and sizes but not the survey picture underneath, and a lost or wiped phone loses its survey images.
Each company is kept apart
Design layouts, branding and analytics are stored in a Postgres database hosted by Neon. The database enforces row-level security by company, so a query cannot read another company's rows. The application connects with a restricted database role that cannot bypass those rules.
Sign-in without passwords
You sign in with a one-time code emailed to you. We store only a keyed hash of each code, never the code, and codes expire and limit attempts.
Encrypted in transit
Everything between the app and our servers uses HTTPS.
Analytics without customer content
The app records what was done (for example, a template was added or a handout was sent), never the customer's name, address, survey image or drawing.
Share links
A client share link is a read-only snapshot at an unguessable address, not indexed by search engines. It expires after 60 days and the builder can revoke it.
AI photo finish
AI photo finish is optional. When you use it, a render or composite image of your design and a yard photo only if you choose to include one are sent to OpenRouter and the image model it routes to (ByteDance Seedream or Google Gemini) to produce the image. We never send customer names or addresses. Nothing is sent unless you ask for it. See the data processing summary.
Who we use
Cloudflare (hosting, API, DNS, email routing and file storage for share links), Neon (database), Resend (email), Stripe (payments and sales tax), OpenRouter with ByteDance Seedream and Google Gemini (optional AI images). Details are in the data processing summary.
Reporting a problem
Email info@tegminestar.com with the word Security in the subject. We have not had an independent security audit yet, and we will not claim a certification we do not hold.
