Privacy Policy

Last updated: July 2026

Note: this is a working draft. Before relying on this as your final privacy policy — particularly around ICO registration and data controller obligations — have it properly reviewed for your specific circumstances.

What we collect

Your account email and password (handled securely by our authentication provider, Supabase — we never see your raw password). Property details you enter (addresses, tenant names). Compliance documents you upload, and the dates associated with them.

How we use it

To run the service: showing your properties and documents back to you, sending expiry reminder emails, and — if you use the AI features — sending document images or your questions to Anthropic's Claude API to extract dates or answer questions. We don't sell your data or use it for advertising.

Who we share it with

We use a small number of service providers to run Tenfa: Supabase (database, authentication, file storage), Resend (sending emails), Anthropic (AI document reading and the Compliance Assistant, only when you use those features), and Stripe (payment processing, only your billing details — Tenfa never sees your full card number). Each of these processes data only as needed to provide their part of the service.

Data security

Every landlord's properties and documents are kept separate at the database level, enforced by the database itself. Documents are stored in a private file store, not publicly accessible without a signed, time-limited link.

Your rights

You can ask to see, correct, or delete your data at any time by contacting us. Deleting your account removes your properties, documents, and activity history.

Contact

Questions about your data: teokalendar@gmail.com