Data Processing Explanation
How and why we process your data
⚙Our core purpose
We process your data to provide property management and compliance tracking services. This page describes product uses of data; it is not a data processing agreement or a certification of GDPR compliance.
Processing Activities
Property Management
We process property data such as addresses, valuations, mortgage details, and property notes to help you manage and monitor your portfolio.
Tenancy Tracking
Tenant names, contact details, rent amounts, deposit details, and tenancy dates are processed to enable tenancy management and status tracking.
Compliance Monitoring
Certificate dates and expiry information are processed to show in-app expiry indicators for recorded items.
Financial Reporting
Income, expense and receipt records are processed to prepare bookkeeping summaries, MTD-style summaries and tax review reports. The app does not submit returns or updates to HMRC.
Client Portfolio Management
On Agent, client and property data supports portfolio management and read-only portal sharing. Valid portal links grant access without a separate client login; private tenancy evidence is excluded.
Service Security & Authentication
Supabase Auth handles sign-in. Security logs can record account identifiers, actions, IP addresses and browser details to support access investigations.
Data Retention
Ending a tenancy preserves its records. Deletion of properties and tenancies with linked history may be blocked to preserve that history. Contact support to request a data-retention or deletion review.
Removing or replacing a document attempts cleanup of eligible storage objects; cleanup may remain pending after a failure. There is no automatic account-closure deletion workflow in the current app.
Your Rights Under UK GDPR
- Right of access — you can request a copy of the data we hold about you.
- Right to rectification — you can correct inaccurate data.
- Right to erasure — you can request deletion of your data.
- Right to object — you can object to processing based on legitimate interest.
- Right to data portability — you can request a copy of your data. Plan-gated financial reports are not a complete personal-data export or a substitute for a rights request.