Skip to main content

Legal

Privacy, in plain words.

What we store, who helps us run the service, and what you can do about it.

Last updated

Template — have this reviewed by a lawyer before launch. This page is a plain-language starting point. It is not legal advice.

The short version

We store the information you type into the app so that it can work. We do not sell it. We use only essential cookies, so there is no cookie banner. You can download your data or delete your account yourself in Settings.

Who is responsible for what

Your account data (name, email, password and settings): the operator of Landlord Manager is the controller.

Tenant and property data you enter (tenant names and emails, leases, rent records, expenses, documents): you, the landlord, decide why and how it is used, so you are the controller. We act as your processor and handle it only to run the service for you.

As a landlord you are responsible for having a lawful reason to hold your tenants' data and for telling them about it.

Operator details and company address: to be added before launch.

What data we store

  • Account: name, email, a hashed password (we cannot read it), role (landlord or tenant) and optional contact details.
  • Property data: properties, units, leases, rent records, expenses and notes.
  • Files: documents and receipts you upload.
  • Activity: a timeline of events inside your account, for example "rent marked as paid".
  • Notifications and emails: in-app alerts, and the invites, reminders and password resets we email.
  • Energy connection (only if you use it): if you connect UMeter, your access tokens (stored encrypted), the list of addresses you chose to share, which unit each address is linked to, and monthly electricity and gas totals read from UMeter.

We do not store card or bank details. The app does not process payments.

Why we use it

  • To provide the service you asked for (contract).
  • To send emails that the service needs, such as invites, rent reminders and password resets (contract).
  • To keep the service secure and fix problems (legitimate interest).

Who else handles it (sub-processors)

We use service providers in these categories. They process data only on our instructions.

  • Database hosting — stores your account and property data.
  • File storage — stores uploaded documents and receipts.
  • Email delivery — sends invites, reminders and password resets.
  • Energy data provider (optional) — UMeter, only if you or your tenant connect it. It is the source of the energy totals, and you can disconnect at any time in Settings.

Named providers and their data locations: to be listed here before launch. We do not sell personal data and do not use it for advertising.

How long we keep it

We keep your data while your account is open. When a landlord deletes their account in Settings, the account and all the data tied to it are deleted. When a tenant deletes theirs, the personal details on the account are removed and the name is replaced by "Deleted user"; the landlord keeps the lease and payment history. Copies in backups are removed on the normal backup cycle: period to be confirmed before launch.

Landlords may have their own legal duty to keep rent and expense records for a number of years. Export your records before you delete your account.

Your rights

Under the GDPR you can ask to access, correct, delete, export or restrict the use of your data, and object to some uses. You can also complain to your local data protection authority.

  • Export: Settings → Download my data.
  • Deletion: Settings → Delete account.
  • Correction: edit your profile in Settings.

If you are a tenant and want something changed about data your landlord entered, ask your landlord first. You can also write to us.

Cookies

We use only essential cookies and storage:

  • a session cookie that keeps you signed in,
  • a CSRF cookie that protects sign-in forms,
  • a theme preference (light, dark or system), stored on your device.

We do not use advertising or tracking cookies, so no cookie banner is needed.

Security

Passwords are stored hashed. Uploaded files are private and opened through short-lived links. No system is perfectly secure, and we will tell affected users and the authorities where the law requires it.

Changes and contact

If we change this policy in a meaningful way, we will update the date above and tell you in the app or by email.

Questions or requests: privacy@<your-domain> (placeholder: set NEXT_PUBLIC_CONTACT_EMAIL before launch). See also our terms.