Identity and sessions
Passwordless links are short-lived and single-use. Only cryptographic token hashes are stored. Browser sessions use secure, HTTP-only cookies and can be revoked.
Security and trust
Property Seer separates identity, property authorization, verification, and financial approval. A signed-in user does not automatically gain access to any property.
Passwordless links are short-lived and single-use. Only cryptographic token hashes are stored. Browser sessions use secure, HTTP-only cookies and can be revoked.
Every protected page resolves a principal, an active role assignment, a property, and a specific capability. Roles are designed to be least-privilege and time-bounded.
Document uploads, independent verification and registry anchoring are planned. The current passport contains owner-entered facts; saving a record does not verify it. Active assigned roles can read systems, appliances and warranty records. Recorded-title references follow the owner-only administration boundary and are not sent to other roles. Document workflows and finer sharing controls remain planned.
Property Seer may organize evidence and propose next steps. It cannot silently verify facts, transfer title, hire a vendor, release funds, or represent an owner without an authorized human decision.
If you believe you found a security problem, email human@propertyseer.com. Do not access records that are not yours, alter data, disrupt service, or disclose personal information. Include the affected URL, observed behavior, and safe reproduction steps.