Trust and security
How your search is ranked, how your information is used and shared, and how your account is protected. CoverHome is a technology platform operated by ZootPro, Inc.
How your search is ranked
Every home available through our connected sources that fits the location and price you set, and any required filters you add, is shown. Your location and price stay fixed. Feature preferences change only the order.
Household details never rank, filter or hide homes.
How household and account information is used
We collect your account and profile details, plus what is needed for the referrals and showings you ask for, to run your account and carry out those requests. Household details are optional context. You can leave them out and still search.
Our marketing pages and professional consoles use a Google tag. The home-search app and our mobile apps contain no third-party analytics or advertising tools. In the home-search app we count search steps, such as search started, in daily totals that hold no personal data. They honor Global Privacy Control and Do Not Track.
Who can see your information when you request a showing or a vendor referral
- Tour request. The selected agent and their brokerage see the home, the time you chose and the request status, with a neutral “Buyer” label. They do not see your name, email or phone number, and neither do CoverHome’s admin screens.
- Calls. When the agent connects with you, CoverHome places the call from a CoverHome number, so neither side sees the other’s number. Calls are not recorded. If call connection is not available, nothing is placed and your number is not revealed.
- When your name is shared. An agent sees you as a client only after you confirm a full representation agreement with that agent. A private-home request shares your name, email and message with that listing’s agent and brokerage, because you sent it.
- Vendor referral. Each referral is offered to one vendor at a time. Before the vendor accepts, they see only the category, state and request date. After they accept, they also see the note and the contact details you chose to share for that request.
Account, document and payment protection
- Strong passwords are required, and sign-in attempts are rate limited.
- Optional two-step sign-in with an authenticator app and backup codes is in your account settings.
- Signed agreements are kept in private storage and open only through links that expire after 15 minutes.
- Card details are entered on Stripe-hosted pages. CoverHome does not store card numbers.
- Each role sees only what it needs. Consumers, agents, brokers, vendors and staff have separate access.
Technical details
- Passwords are hashed with scrypt and must be at least 12 characters with upper and lower case letters, a number and a symbol.
- Two-step sign-in uses time-based codes (TOTP), single-use backup codes and an email-code fallback. Consumers choose whether to turn it on.
- Sessions are stored on the server and can be revoked. Sensitive actions are written to an audit log.
- Agreement links are signed, time-limited URLs to a private storage bucket.
- Payments use Stripe-hosted Checkout and the Stripe billing portal. We receive confirmation and limited billing details, not card numbers.
- Search-step counters store a day, the three campaign tags from the ad link, a step name and a count. They are kept for 24 months.
Deletion and retention
You can delete your account yourself, on the web and in the apps. Deletion is immediate and cannot be undone. It removes your account, sessions, saved searches, favorites, profiles and household details from our active systems.
Some records may be kept where needed for billing and tax, security and fraud prevention, legal obligations, and transaction records. Where possible they are de-identified. Backup copies may remain until they rotate out.
Guest tour requests. If you request a tour without an account, your name, email, phone and note are erased 30 days after a set start. For a request that was never confirmed, that is the day you sent it. If a confirmed request is cancelled, it is the day of the cancellation. For a confirmed showing, it is the end of the showing, counted as one hour after the confirmed start, or earlier if the showing is marked complete. Until then the details are kept because the agent needs them. The erase runs daily. For signed-in accounts, deleting the account removes your link to the request and your phone number.
Other requests. If no vendor takes a referral, your note and contact details are erased. A private-home request is erased 30 days after it is closed.
Accessibility
We build with keyboard access, labelled controls and small screens in mind. We have not completed a formal accessibility audit, and some complex views may not work fully with assistive technology yet.
If something blocks you, email hello@coverhome.app with the page, what you were trying to do and any assistive technology you use.