How a HomeWalk stays private
Private customer links
Customers receive a long, opaque link rather than a predictable customer or property ID. The private token is stored by HomeWalk in hashed form. Customer HomeWalk pages are also configured with search-engine instructions not to index or follow them.
Private uploads
Property photos, electricity bills and similar customer files are stored in a private Supabase Storage bucket. HomeWalk creates signed upload and download links when a permitted customer or workspace user needs to transfer a file. Those file links are time-limited rather than permanently public.
Workspace separation
Business users sign in to a HomeWalk workspace. Server-side checks scope customer records to the workspace associated with the authorised user or admin token. Database Row Level Security is enabled on HomeWalk’s core tables, while privileged service credentials remain on the server and are not exposed to the customer browser.
Infrastructure
HomeWalk currently uses Supabase for authentication, database, private storage and server-side functions, with the primary project configured in Sydney, Australia. Vercel hosts and delivers the Next.js web application. Supporting delivery, security and logging infrastructure may operate across other locations.
What customers should do
- Only open a HomeWalk link you recognise from the business you are dealing with.
- Do not forward the private link unnecessarily.
- Only upload information relevant to the property or quote.
- Never take a safety risk to obtain a photo.
- If a link was sent to the wrong person, tell the sending business.
What pilot businesses should do
- Invite only people who genuinely need access to the workspace.
- Keep account passwords private and use individual user accounts rather than sharing credentials.
- Send customer links only through an appropriate customer communication channel.
- Collect only information that is relevant to preparing or reviewing the job.
Last updated 16 October 2026. Security controls are reviewed as HomeWalk moves from founding pilot toward broader commercial use.