Security & privacy

Inspection Day handles property access details, client contact information, and inspection reports. Here is how we protect them.

Your data stays in your account

Every property, inspector, request, schedule, and report belongs to one account, and every request to our servers is checked against the signed-in account. Inspectors use single-purpose secure links that open only their own request.

Accounts and sign-in

• Passwords are stored only as one-way hashes (scrypt); we can’t see them.
• Sign-in sessions use secure, HttpOnly cookies and expire automatically. You can sign out other devices from Settings.
• Password resets use single-use links that expire in one hour.
• Sign-in and messaging endpoints are rate-limited.

Inspection reports

• Reports are stored privately. They open only through signed links that expire (minutes inside the app).
• Uploads are checked to be real PDF or image files and limited in size.

Inspection AI

• Report text is sent to OpenAI only to identify what the inspector reported, with storage for model improvement turned off. Your reports are not used to train AI models.
• Every finding links to the report page it came from, and nothing is shared with your client until you review and approve it.
• Inspection AI is not an inspection and is not legal or professional advice.

Messages

Text messages go through a registered business messaging service (Twilio). Recipients can reply STOP at any time. We never sell phone numbers or use them for marketing.

In transit

All traffic to inspectionday.co is encrypted with HTTPS, and browsers are told to always use HTTPS.

Questions or deletion requests

Email support@inspectionday.co to ask a security question, report a concern, or have your account and reports deleted. See our Privacy Policy for details.