Privacy Notice

trista cummings operates Tenant Cafe and is the data controller for the personal data described here. This notice explains what we collect, why, and your rights.

What we collect

• Account details — name, email address, login credentials and your role (tenant, landlord or property manager).
• Rental records — properties, units, leases, tenant profiles, rent payment records, maintenance requests, notes and incident logs you enter.
• Files — documents, receipts, photos and videos you upload.
• Messages — conversations between tenants and landlords in the app.
• Technical data — IP address, device and browser information, and usage logs.

Why we use it and our legal basis

• To create your account and provide the Service (performance of a contract).
• To keep the Service secure and prevent fraud (legitimate interests).
• To provide support and improve the Service (legitimate interests).
• To send product updates or marketing, only where you agree (consent).
• To meet legal obligations, such as record-keeping (legal obligation).

Who we share it with

• Service providers that host and run the Service, such as cloud hosting, database and file storage.
• Paddle, our Merchant of Record, for the sale of plans, subscription management, payments, tax compliance and invoicing. Paddle handles payment details under its own privacy notice.
• Professional advisers, such as lawyers and accountants.
• Authorities, where required by law.

Information you share with a landlord or tenant in the app (for example messages or uploaded documents) is visible to that person.

International transfers

Our providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep your data while your account is active and as needed for legal obligations. After that it is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or export your data, to object to processing, to withdraw consent, and to complain to your data protection authority. We respond within one month.

Security

We use encryption in transit, access controls and private file storage to protect your data.

Cookies

We use essential cookies and local storage only to keep you signed in and the app working. We do not use advertising cookies.

Contact

To exercise your rights, contact trista cummings through the contact details in your account.