Privacy policy

1. Data controller

Controller for platform account data: LandoraHub ([Uzupełnij przed produkcją / Complete before production]), [Uzupełnij przed produkcją / Complete before production], United Kingdom. Contact: support@landorahub.com.

For tenant/tenancy data you upload, you are typically the controller; we process on your instructions as processor (Art. 28 UK GDPR).

2. Personal data we process

• Account: name, email, password hash, role, plan, locale/market preferences.
• Property & tenancy: addresses, rent, deposits, certificates, messages, documents you upload.
• Tenant/applicant data you enter: names, contact details, referencing information (your responsibility as controller).
• Technical: IP address, device/browser data, logs, cookie consent choice, coarse product usage if you accept optional cookies.
• Billing: payment status via Stripe (we do not store full card numbers).

3. Purposes & lawful bases

• Provide the Service — Contract (Art. 6(1)(b)).
• Security, fraud prevention, abuse detection — Legitimate interests (Art. 6(1)(f)).
• Billing & accounting — Contract / Legal obligation (Art. 6(1)(b)/(c)).
• Product improvement (optional usage telemetry) — Consent (Art. 6(1)(a)) via cookie banner.
• Marketing emails — Consent (Art. 6(1)(a)) where opted in; unsubscribe anytime.

4. Recipients & subprocessors

We use trusted providers to run the Service. They process data only on our instructions and appropriate contracts:

• Supabase Inc. — Database, authentication, file storage (EU / US (per project region); Standard Contractual Clauses / UK IDTA where applicable)
• Stripe Payments Europe Ltd. / Stripe Inc. — Subscription billing and payment processing (EU / US; PCI-DSS; DPA / SCCs)
• Vercel Inc. — Application hosting and edge delivery (EU / US; DPA; SCCs)
• Resend (or transactional email provider configured) — Transactional email delivery (US / EU; DPA where available)
• Sentry (Functional Software Inc.) — Error monitoring and performance (if enabled) (US / EU; DPA; SCCs)
• Anthropic PBC (optional AI features) — AI-assisted drafting when landlord enables AI Lab (US; No tenant PII sent without explicit user action; DPA review required)
• Mapbox Inc. — Maps and geocoding on dashboard / marketing tools (US; DPA; SCCs)

5. International transfers

Some providers may process data outside the UK. Where required we rely on UK International Data Transfer Agreements (IDTA), UK Addendum to EU SCCs, or adequacy regulations. Details are available on request.

6. Retention

Account data is kept while your account is active and for a reasonable period after closure for legal, security, and billing purposes.

Tenancy records you store may need to be kept for several years under UK tax and landlord law — configure exports and deletion according to your obligations.

7. Your rights

Under UK GDPR you may have rights of access, rectification, erasure, restriction, portability, and objection. Use Settings → Privacy & data in the app or email support@landorahub.com.

You may complain to the Information Commissioner's Office (ICO): ico.org.uk.

8. Children

The Service is not directed at children under 18. Do not enter children's data except where lawful and necessary for your letting business.

9. Automated decision-making

We do not make solely automated decisions with legal or similarly significant effects on account holders. Compliance scoring in the product is rule-based indicators only, not legal determinations.

10. ICO registration

Our ICO registration status: Pending / to be confirmed.

11. Changes

We may update this policy. The "last updated" date will change and significant updates may be notified in-product.