Who is responsible for your data
TODO: the legal entity acting as data controller, its registered address, and the contact route for data-protection questions.
What we collect
TODO: account data, portfolio data entered into the product, billing data handled by Stripe, and product telemetry — each with the purpose and the lawful basis it is processed under.
Tenant and owner data you enter
TODO: the controller/processor split. Customers are the controller for tenant and owner records they enter; The Property Tool processes that data on their instructions.
Where data is hosted
TODO: hosting regions and sub-processors, and the transfer mechanism for any processing outside the EEA. The homepage FAQ states EU-based infrastructure in line with GDPR — that claim needs to be substantiated here or corrected there.
How long we keep it
TODO: retention periods per category, and what happens to portfolio data after an account is closed.
Your rights
TODO: access, rectification, erasure, portability, objection, and how to exercise them, including the right to lodge a complaint with a supervisory authority.
Cookies and local storage
TODO: the product stores a language preference, a currency preference and a cached geo lookup in browser storage, and uses Supabase for authentication sessions. Each needs describing, with the consent position.