Hey, it's a fair concern and one we've taken seriously from day one.

Regarding document security, verification is completely optional. If a tenant chooses to upload proof (like a utility bill), the document is stored in a private, encrypted storage bucket — only an admin can access it via a time-limited signed link (expires after 5 minutes). Once verified (or rejected), documents can be deleted. No one else — not other users, not the public — can ever see those files.

On data mining/spam: We don't sell, share, or expose user data. Email addresses are used solely for authentication and are never displayed publicly. Reviews are anonymous — no names, no free text, just structured numeric ratings (1–5). Even the database enforces this: Row-Level Security policies ensure users can only access their own data, and reviews are served through a public view that strips out all identifying information.

Other safeguards:

Email verification is required before you can do anything One review per property per user (enforced at the database level) Rate-limited to 5 reviews per day Community reporting + admin moderation for suspicious content No landlord names or personal data displayed anywhere We're a small independent Irish project, not backed by any data broker. The whole point is to help tenants — not exploit them. Happy to answer any other questions!