Your studio's data, protected.

Houscade enforces isolation at the database layer with PostgreSQL row-level security: every query is scoped to your studio, so your leads, quotations, invoices, and files are visible only to you and the teammates you invite. This isn't an application-level filter — the database itself refuses to serve another studio's rows.

Team members get role-based permissions (owner, admin, designer, viewer), so a site supervisor posting progress photos can't edit your invoices. Client share links are token-scoped: a client sees exactly the proposal or project view you shared — nothing else.

Export your data from the app whenever you like — your work belongs to you, and leaving Houscade is always allowed. You can also delete your account and its data from Settings. No lock-in is a product principle, not a support favour.

Houscade runs on established, enterprise-grade infrastructure: Supabase (database, authentication, storage — hosted in the AWS Mumbai region) and Vercel (application hosting). Payments are handled end-to-end by Razorpay, a PCI-DSS compliant payment processor — full card details never touch our servers.

Houscade is designed with the Digital Personal Data Protection Act, 2023 in mind — consent-first data handling, a named Grievance Officer, and data kept in India. The details are in our Privacy Policy.

If you believe you've found a security issue, please email security@houscade.in with the details. We read every report, act on confirmed issues promptly, and will credit you if you'd like. Please don't test against other studios' data — set up a free account instead.