Privacy Policy

Who we are

LandlordHub is operated by Karlo Perčinić. For any privacy question or request, contact percinicc@gmail.com.

If you are a tenant (and who is responsible)

Your landlord decides what to record about you and why — legally they are the data controller. LandlordHub stores and processes it on their instruction, as their processor. That does not make it only their responsibility: we are accountable for how the data is held, secured and deleted.

• You get your own login. You see your own payment record and your own maintenance requests — you are not just a row in someone else's database.
• Isolation is enforced in the database itself (row-level security), not in the interface, so one account can never read another's data.
• Documents and photos live in private storage. There are no public links; generated links expire (10 minutes for receipts and photos, 1 hour for documents) and filenames are random.
• Photo metadata is stripped on upload — GPS location, device model and timestamp are removed. This matters when you photograph a fault inside your home.
• Your landlord can set payment proofs to delete automatically after 1–5 years.
• We do not process payments, so no card details exist in the system at all.
• We never sell personal data and do not use tenant data for advertising.

Tenant requests (access, correction, deletion)

Ask your landlord first — they control the record and can edit or delete it directly. If that is not possible, or you would rather not go through them, write to percinicc@gmail.com and we will act on it ourselves and tell you what we did. You do not need a LandlordHub account to make a request.

What we collect

• Account data (landlords): your name and email address.
• Tenant & guest data you enter: names, emails, phone numbers, addresses, lease dates, rent records, and maintenance requests.
• Documents you upload (e.g. leases, IDs, insurance), stored privately.
• Usage & device data: basic technical information (IP, browser) needed to serve the site securely.
• Marketing analytics (Meta Pixel): only if you consent to cookies.

Why we use it (legal bases)

• To provide the service you signed up for — tracking rent, managing tenants, storing documents (performance of a contract).
• To keep the service secure and working (legitimate interest).
• To measure and improve our marketing (consent — you can decline).

Cookies

• Essential cookies — required to log you in and run the app. These cannot be turned off.
• Analytics/advertising cookies (Meta Pixel) — set only if you click "Accept" on our cookie banner. Decline and no tracking cookies are set.

Who we share it with

We do not sell your data. We use trusted providers only to run the service:

• Supabase — database, login and file storage (EU, Frankfurt)
• Vercel — website and application hosting
• Hetzner — encrypted backups of the database (EU, Germany)
• Stripe — subscription payments (they handle card data; we never see it)
• Resend — sending transactional emails
• Anthropic — AI drafting of lease renewal documents; receives the tenant name and property details for that document only
• Cloudflare — bot protection on the sign-in and sign-up forms
• Upstash — rate-limiting counters, keyed by IP or account, no personal content (EU, Frankfurt)
• ImprovMX — forwarding email sent to our landlordhub.io addresses
• Meta — advertising analytics, only with your cookie consent

How long we keep it

We keep your data for as long as your account is active. Payment proof images can be set to delete automatically after 1–5 years from your Account page; the payment records themselves are kept.

When you delete your account, your data is removed from our live systems immediately. It also exists in encrypted backups, which are destroyed by rotation within 8 weeks.

Your rights

You can access, correct, export, or delete your data. You can delete your account and all associated data at any time from Account → Delete Account, or by emailing percinicc@gmail.com. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

Changes

We may update this policy; material changes will be reflected by the "last updated" date above.