Website Security

Elm City Property Services uses reasonable technical and organizational measures intended to protect website inquiries and reduce abuse. The site is designed to collect only the information reasonably needed to respond to requests.

Our approach

• Encrypted HTTPS connections in production.
• Server-side form validation and basic abuse controls.
• Credentials and service keys stored outside the public source code.
• Security-focused response headers and minimized public data collection.
• Established infrastructure providers, including Vercel for hosting and Resend for website email delivery.

Booking and staff access

Booking records and property photos use Supabase infrastructure. Staff sign-in uses the account credentials associated with BuildCurrent, and booking administration checks that the staff member has an authorized Elm City owner or administrator role. Public visitors cannot browse the booking database or staff dashboard.

Property photos are stored privately and made available to authorized staff through temporary links. Private customer request links allow access to limited request details and cancellation, so treat these links as confidential. Staff sessions use an essential secure cookie. Booking forms use server-side validation and limits on repeated requests.

No online system can guarantee absolute security. If a private link or staff account may have been compromised, contact us promptly so we can investigate. Do not include passwords or other sensitive credentials in your report.

Online payments

Payments from invoice links are processed by Stripe. Elm City does not collect full payment card details through its own website forms. Always use the payment link supplied with your invoice, and contact us if a link looks suspicious.

Automated abuse protection

Our public request forms can use Cloudflare Turnstile along with server-side verification, form validation and rate limits to reduce spam. These measures do not guarantee all malicious traffic will be blocked.

Reporting a concern

If you believe you found a security issue involving this website, please report it responsibly to info@elmcitypropertyservices.com. Please include enough information for us to understand and reproduce the issue, and do not access or retain data that does not belong to you.