Security & Trust at My Porchlight
Your household runs on trust, and so does My Porchlight. We hold personal, sometimes sensitive information about your family, your home, and your plans — and we treat it that way. This page explains, in plain language, how we protect it.
Last updated: 2026-07-23
How we protect your data
- Encrypted in transit. Every connection to My Porchlight uses HTTPS/TLS, so your data is encrypted as it travels between your device and us.
- Encrypted at rest. Your data is stored on Google Cloud, encrypted on disk by default — the database, uploaded documents, and photos alike.
- Secrets are vaulted. Passwords, API keys, and access tokens live in a managed secret store, never in our code.
- Least-privilege staff access. Our internal tools are reachable only through Google single sign-on on a company account — no shared passwords, no public access.
- Backups & recovery. The database is backed up automatically every day, with point-in-time recovery, so your information can be restored if something goes wrong.
- Payments handled by Stripe. Card payments go directly to Stripe, a PCI-DSS Level 1 provider. We never see or store your full card number.
We collect little, and we don't sell it
We ask for only what we need to help you, and we do not sell your personal information — ever. See our Privacy Policy for the details, including how we respond to government or legal requests (minimally, and documented).
You're in control
- Access & export — ask us for a copy of the information we hold about you.
- Correct or delete — update or delete your information, or close your account.
- Communications — opt out of non-essential email anytime.
To exercise any of these, contact us at the address below.
Where your data lives
My Porchlight is built and operated in the United States on Google Cloud. The outside services we rely on to run the product are listed on our Subprocessors page, each under agreements that limit their use of your data.
Reporting a security concern
If you believe you've found a security issue, please email admin@myporchlight.us with the details. We take reports seriously, investigate promptly, and will keep you updated. Please give us a reasonable chance to fix an issue before disclosing it publicly.
If something ever goes wrong
We maintain an internal incident-response plan. If a security incident affected your information, we would investigate, contain it, and notify affected users and any required authorities in line with applicable law.
Contact
My Porchlight · 1423 Burley Ave, Tyrone, PA 16686 · admin@myporchlight.us · (814) 343-1220