Security
People trust MoveGuard with photos of their homes and records that may matter in a dispute. Here is how we protect them, and what to do if you find a problem.
How we protect your data
- ✓ Every connection is encrypted (HTTPS), and stored files and data are encrypted by our providers.
- ✓ Each account can reach only its own records, enforced inside the database, not just the app.
- ✓ Sealed records get SHA-256 fingerprints and an independent timestamp, so changes are detectable.
- ✓ File links are private and expire; share links can be revoked anytime.
- ✓ Card details go straight to Stripe. MoveGuard never sees or stores them.
- ✓ Sign-in uses one-time email codes or links, with bot protection. There are no passwords to leak.
More detail on how records are sealed and verified: Trust & security
Report a security problem
Email moveguard.help@gmail.com with “Security” in the subject. Tell us what you found, the steps to reproduce it, and what could be affected. We aim to reply within 3 business days and will keep you updated until it’s fixed.
Please
- • Only use accounts and records you own or have permission to test.
- • Don’t view, change, or keep other people’s data, and stop if you reach any.
- • Don’t disrupt the service (no load or denial-of-service testing, no spam).
- • Give us reasonable time to fix the issue before sharing it publicly.
If you follow these guidelines in good faith, we won’t pursue legal action against you for your research. We don’t run a paid bug bounty yet, but we’re glad to credit you.