Your security and privacy are our top priorities. We leverage industry-standard encryption and trusted cloud infrastructure to protect your personal and financial information.
All data transmitted between your browser and our servers is encrypted using industry-standard TLS protocols via Google Cloud Platform.
Email verification, secure password requirements, and session management via Firebase Authentication protect your account.
Hosted on Google Cloud Platform with built-in DDoS protection, automatic backups, and geographic redundancy.
Your identity stays anonymous during auctions. Only the lender you choose receives your contact information.
Lenders only see anonymized information during auctions. Your name, contact info, and exact address are never revealed.
Only the lender you choose receives your full information. Other lenders never get access to your identity.
Documents are encrypted and we intend to delete them within 90 days after your auction closes, minimizing your data footprint.
All sensitive data is encrypted in transit (TLS) and at rest via Google Cloud Platform and Firebase. Your documents are never stored in plain text.
Hosted on Google Cloud Platform with automatic backups, DDoS protection, and geographic redundancy. GCP maintains SOC 2 Type II certification.
Role-based access control ensures only authorized team members can access administrative systems. Firestore security rules enforce data isolation between users.
Firebase Authentication handles login security including brute-force protection, secure session tokens, and password hashing.
We keep platform dependencies updated and monitor for known security vulnerabilities in our software supply chain.
All lenders must pass NMLS verification before accessing the platform. We verify licensing status in each state where they operate.
We maintain documented incident response procedures. In the event of a data breach, affected users will be notified in accordance with applicable laws.
Firebase and GCP provide automated daily backups and geographic redundancy to ensure data availability and disaster recovery.
Our primary vendors (Google Cloud, Firebase, Stripe) each maintain their own security certifications. We select vendors that meet industry security standards.
Encryption for all data in transit via GCP
Sensitive data encrypted at rest via Firebase/GCP
SOC 2 Type II certified infrastructure provider
Payment security via Stripe integration
Security is a shared responsibility. Here's how you can help protect your account:
If you discover a security vulnerability or have concerns about your account security, please contact us immediately. We take all reports seriously and will respond promptly.
Yes. We use encryption for data in transit and at rest via Google Cloud Platform. During auctions, lenders only see financial ranges, not exact figures.
Only you can see your documents initially. After you select a winning lender, only that specific lender gains access. Documents are encrypted and we intend to delete them within 90 days after your auction closes.
No. We never sell, rent, or trade your personal information to third parties for marketing purposes.
All lenders must provide valid NMLS numbers and state licensing. We verify this information through NMLS Consumer Access before granting platform access. Verification typically completes within 24 hours.
© 2026 HomeTurf Mortgage Marketplace. All rights reserved.
We use essential cookies to keep you signed in and operate the platform. With your permission we also use advertising cookies (Meta) to measure how well our ads work. We never share your financial details. See our Privacy Policy.