Security

You sign in with Google, so we never store a password for you. Google confirms your email address. Sessions last up to seven days and use a cookie that page scripts cannot read.

Uploaded files are kept in private storage, not on the public website. Every download checks that you are signed in and allowed to see that move. Uploads are checked for file type and size, and each version is kept.

Your household and the staff working on your move can see it. Coordinators see only the moves assigned to them.

A provider sees only the item or document version you share, until access expires or you stop sharing. An employer sees only the progress you choose to share.

We do not store card details. Emails waiting to be sent and connection tokens for outside services are encrypted. AI drafts stay drafts until a person reviews them.

The website uses encrypted connections only, with a strict content security policy that blocks scripts from unknown sources. Cloudflare protects the website from abuse.

Keep your Google account secure with two-step verification. Sign out on shared devices, and save an offline checklist only on a device you trust.

If you believe you have found a security problem, email hello@settleinlatinamerica.com. Describe the issue, the steps to reproduce it, and the pages or accounts involved.

Please test only with your own account. Do not access other people's information, change or delete data, or degrade the service. Give us reasonable time to fix the issue before you share it publicly. We do not offer paid rewards for reports at this time.