Privacy Notice

1. Who we are

Real Estate Manager ("we", "us") is the data controller for personal data processed through the Service, and decides how and why that data is used. You can reach us at support@realestatemgr.com.

Where you enter information about your tenants, you are the controller of that tenant data and we act as your processor, handling it only to provide the Service to you.

2. Personal data we collect and why

• Account data — name, email address, and login credentials (stored hashed). Used to create and secure your account and authenticate you. Legal basis: performance of our contract with you.
• Subscription and entitlement data — plan, billing cycle, unit count, trial end date, subscription status, invoice records and amounts. Used to provide and manage the paid Service. Legal basis: contract performance and legal obligation.
• Content you enter — property details, unit details, tenant names, contact phone numbers, lease dates and terms, rent and preferential rent amounts, subsidy details, security deposits, charges, credits, and payments. Used to provide the record-keeping, ledger, billing, and reporting features you request. Legal basis: contract performance; for tenant data, our legitimate interest in delivering the Service on your instructions.
• Support communications — messages and attachments you send us. Used to answer your requests. Legal basis: contract performance and legitimate interests.
• Technical and usage data — IP address, device and browser information, log and error data, timestamps and pages used. Used for security, fraud prevention, debugging, and improving the product. Legal basis: legitimate interests.
• Marketing data — email address where you opt in to product updates. Legal basis: consent, which you can withdraw at any time.

Payment card details are never collected or stored by us; they are handled directly by our payment provider.

3. Who we share data with

• Service providers / subprocessors — cloud hosting and database providers, email delivery providers, and error-monitoring or analytics tooling, acting on our instructions under contract.
• Payment processor — Stripe processes card payments on our behalf and receives the data needed for payment processing, subscription management, tax calculation, invoicing, and fraud prevention. We never receive or store your full card details.
• Professional advisers — legal, accounting, and audit advisers where necessary.
• Authorities — regulators, courts, or law enforcement where required by law or to protect our legal rights.

We do not sell your personal data.

4. International transfers

We and our providers may process data in the United States and other countries. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account and content data for as long as your account is active, and for a reasonable period afterwards so you can export or restore your records. Billing and tax records are kept as long as legally required (typically up to 7 years). Log and security data is kept for a shorter period. When data is no longer needed, it is deleted or anonymised.

6. Your rights

Depending on where you live, you may have the right to access your personal data, correct it, request its deletion, restrict or object to processing, receive a portable copy, withdraw consent, and lodge a complaint with your data protection authority. To exercise these rights, email support@realestatemgr.com. We respond within one month, and we will not discriminate against you for making a request.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored data, row-level access controls so each account can only reach its own records, hashed passwords with breached-password screening, and restricted internal access on a need-to-know basis. No system is perfectly secure, so please use a strong, unique password.

8. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in, maintain your session, and secure forms — these cannot be turned off without breaking the Service. Any analytics cookies are used only to understand aggregate product usage, and marketing cookies are not used unless you opt in. You can clear or block cookies in your browser settings; the checkout flow may also set cookies controlled by Stripe, our payment processor.

9. Children

The Service is intended for business use by adults and is not directed at children under 16.

10. Changes

We may update this notice; material changes will be announced in the app or by email, and the "last updated" date above will change.