Plain answers, with what we have and have not done.
Every client opens a personal link that is signed so it cannot be guessed or edited. The server checks that each project, appointment and invoice belongs to that client before showing it, and shows nothing it cannot match. We tested this with two fake clients and an empty third: no one saw anyone else's records. You can switch off any client's links at any time.
The connection to your CRM starts read-only, with a short list of permissions you can see and cancel in your CRM at any time. We do not take card numbers. The app does not take payments or send messages today.
Names, appointments, project details and invoices are read from your CRM each time a client opens the app and are not saved in our storage. What we do keep about a client is limited to: their CRM id (a code, not a name), when they last opened the app, a marker that the app was used (about five weeks), their notification subscription if they turned notifications on, and daily counters. Lookups of public data that you switch on (weather, property facts by address) are kept up to a day. A client's own phone keeps a copy of their screens so the app works offline; signing out wipes it. We briefly count failed admin sign-in attempts by network address (about ten minutes).
Access tokens are stored as encrypted secrets, never in code, never shown on screen, and never sent to anyone else. Connections go over HTTPS. Each customer app can run on its own web address, so one customer's app cannot reach another's.
An audit trail records who published, created links, switched links off and signed in, and when (kept 90 days; it never contains client names). You can ask us to forget a client: we turn off their links and delete what we keep about them, leaving your CRM record untouched.
Uninstall the app and we delete the connection, the app, its settings, activity records and notification subscriptions. See the deletion page.
The service is checked every five minutes and we get an alert when something is wrong. If something happens that affects your data we will tell you without undue delay and say what we know.
We have not had a formal outside audit or certification (such as SOC 2) and we have not yet had an independent penetration test. We rely on well-known providers (Cloudflare for hosting and storage, HighLevel for your CRM) and on testing we run ourselves. If your company needs a security questionnaire, send it to group@hhmcustomhome.com and we will answer honestly.
HHM Core, 7013 Broughton Ln, Indian Land, SC 29707 · group@hhmcustomhome.com · Terms · Privacy · Support · Data safety · Delete data