Security
Security at Swimming Pool On Demand
Your customers trust you with their homes, their pools and their payments. Here is, in plain terms, how we protect the information you keep in Swimming Pool On Demand.
Payments are handled by Stripe
- Card payments run through Stripe Connect. When a customer pays an invoice or a pay link, they type their card details on Stripe's own secure checkout page, not in our app.
- We never see or store card numbers. Stripe holds them.
- Stripe is certified to PCI DSS Level 1, the highest level of the payment card industry's security standard.
- Payments go to your company's own connected Stripe account.
Built on Google Cloud and Firebase
- The app and its data run on Google Cloud (Firebase).
- All connections to the app, pay links and signing links use HTTPS (TLS) encryption.
- Stored data is encrypted at rest by Google Cloud by default.
Your company's data stays your company's
- Each company's records are kept separate by database security rules that the server enforces on every read and write.
- We test these rules automatically. Our owner-isolation test suite runs 243 checks to confirm that pool owners can reach only their own records and never another company's.
- Pool owners see only their own pool, visits, invoices and documents.
The right access for each person on your team
- Staff accounts have roles, such as Admin, Manager and Technician, and each role only gets the permissions it needs.
- Platform support actions (for example, locking or restoring an account at your request) are written to an append-only audit log recording who did what and when.
E-signatures with an audit trail
- Agreements and quotes are signed through a secure, private link sent to the signer.
- Each signature is time-stamped, and we record the signer's IP address and device/browser, along with when the document was viewed. That trail is printed on the signed PDF.
Account access
- Everyone signs in with their email address and password.
- New accounts must verify their email address before they can use the app's server features.
- Service report emails are sent through Resend, a dedicated email delivery provider.
Questions?
For security questions, or to report a concern, email support@swimmingpoolondemand.com.
Built around the way pool people actually work
Phone-first business management and a lifetime pool story that stays with the property — not the company.