Privacy Policy

This policy covers everyone the Service touches: landlords and their teams, tenants and applicants invited by a landlord, and visitors to our website. It explains what we collect, why, who helps us process it, and the rights you have. LetsGoLandlord is operated by Tidal Equity Partners LLC, a Florida limited liability company — reachable anytime through our private support form.

Three commitments up front: we never sell or rent personal information, we never use your content to train AI models, and we never show ads.

Account data. Name, email, and a password (stored only as a secure hash by our authentication provider). Optional two-factor authentication settings.

Content you add. Properties, units, tenants, leases, ledgers, maintenance tickets, inspections, and the documents and photos you upload or import. This is the heart of the Service and it belongs to you.

Billing data. Payments are processed by Stripe. Card numbers never touch our servers — we store only your Stripe customer reference, plan, and subscription status.

Technical data. Standard server logs (IP address, browser type, pages requested) via our hosting provider, used for security and debugging. Essential cookies keep you signed in — nothing more (see the cookies section).

Optional integrations. If you connect Telegram, we store your chat ID to send alerts. If you connect a bank through Plaid (where available), we receive account names and transactions for the accounts you choose — your bank credentials go to Plaid, never to us.

Landlords use the Service to keep records about their tenants and applicants — contact details, leases, payment history, maintenance requests, and application information the landlord chooses to collect. For those records, your landlord is the data controller and we are the processor: we store and process them on the landlord’s instructions and don’t use them for anything else.

To correct or remove records your landlord keeps, contact your landlord — the law generally governs what they must retain. For questions about how we protect the data itself, submit a privacy support request. If you create a tenant portal login, the account-data promises in this policy apply to you directly.

We use personal data to:

• provide and operate the Service you signed up for;
• run AI features you trigger (see the AI section below);
• send transactional email — invites, alerts, digests, receipts, security notices;
• answer support requests;
• secure the Service, prevent abuse, and debug problems;
• meet legal obligations (tax, accounting, lawful requests).

We do not sell or rent personal data, run third-party advertising, track you across other websites, or use your content to train AI models.

AI features run only when you (or automation you configured) trigger them. The document or data involved is sent to our AI provider, Anthropic, over an encrypted connection through their business API — under terms that do not permit using your content to train their models. The result (extracted fields, a draft, a summary) is stored in your account like anything else you create, with confidence labels where accuracy matters.

We share personal data only with the service providers that run parts of the product, each bound by contract to use it solely for that purpose:

Beyond that: we disclose data if the law compels us (and will notify you unless legally prohibited), and if LetsGoLandlord is ever acquired or merged, your data transfers with the same commitments and you’ll be notified first.

Where bank feeds are available, we use Plaid Inc. to connect the accounts you choose. When you use Plaid Link, you provide your credentials directly to Plaid — never to us — and you grant us and Plaid the right to access and transmit your financial information as described here. Data you share with Plaid is governed by the Plaid End User Privacy Policy.

We receive transaction data (dates, amounts, descriptions) and account metadata (institution, account name, last-four mask), and we use it for exactly one thing: reconciling deposits against the rent ledgers in your account. When you disconnect a bank — or a feed pauses itself for inactivity — we revoke our access at Plaid and delete the access token. Transactions already imported stay in your ledger unless you delete them.

We use essential cookies only: the session cookies that keep you signed in and the Service secure. We don’t use advertising cookies or cross-site trackers, which is why you don’t see a cookie banner. If we ever add product analytics, we’ll choose a privacy-respecting provider and update this policy first.

Traffic is encrypted in transit (TLS 1.2+); databases and file storage are encrypted at rest (AES-256), and bank access tokens get an additional layer of application-level AES-256-GCM encryption. Every organization’s data is isolated with database-level row security — the same query physically cannot return another organization’s records. Access by our systems follows least-privilege principles, and you can add two-factor authentication to your account (required before connecting a bank).

No system is perfectly secure. If a breach affects your personal data, we’ll notify you without undue delay and tell you what happened, what was involved, and what we’re doing about it.

We keep your data while your account is active. If you cancel — or a trial or paid subscription lapses — your account is paused and read-only, and everything stays visible and exportable. We keep it for 90 days, email you a reminder before the deadline, and then permanently delete the organization and all of its data. Reactivate any time within that 90-day window and it all comes back exactly where you left it.

When you request deletion sooner, we remove your personal data from active systems within 30 days; copies in encrypted backups expire on a rolling schedule shortly after. We retain what the law requires us to keep (for example, billing records for tax purposes) for the legally required period only.

Wherever you live, we extend the same rights to everyone: ask us to access, export, correct, or delete your personal data by submitting a privacy support request. We’ll verify it’s you and respond within 30 days, and we never treat you differently for exercising your rights. Most exports don’t even need an email — CSV export is built into the app on every plan.

We send almost no marketing email; anything promotional includes an unsubscribe link. Transactional messages (receipts, security notices, alerts you configured) continue while you have an account, and alert emails are configurable in Settings.

The Service is for adults 18 and over. We don’t knowingly collect personal information from children; if you believe a child has provided us data, contact us and we’ll delete it.

We host and process data in the United States, and our service providers are primarily U.S.-based. If you use the Service from elsewhere, you understand your data is processed in the U.S. under this policy.

We’ll update this policy as the Service evolves. Material changes get advance notice by email or in-app before they take effect, and the effective date at the top always reflects the current version. Earlier versions are available through our support form.