Privacy & your data

What we collect

To run a tenancy we hold: your account details (email, name), the tenancy records you create (property, tenants, rents, obligations), the statutory documents generated for you, and — if you use the payments agent — a wallet balance and transaction ledger. We do not sell your data or use it for advertising.

Where it lives

Your data is stored in the United Kingdom (our servers and database run in London). Signed documents are held in an immutable vault; every action is written to an append-only audit log so there is a court-ready record of what was done, when, and by whom.

How it is protected

Access is isolated at the database level — one landlord (or tenant) can never see another’s figures or documents. Passwords are stored only as salted scrypt hashes; sessions expire and are purged. Payment card details are never held by LetRight — they are processed by our regulated payment provider.

Your rights (UK GDPR)

You can export everything we hold about you at any time (Article 15) and request erasure of your personal data (Article 17). Erasure scrubs your identifying information; records we are legally required to keep — the audit log, signed statutory documents, and financial ledger entries — are retained under the legal-obligation grounds in Article 17(3), and we tell you exactly what was kept and why. Signed-in users can trigger both from their account; we action requests without undue delay.

Contact

For any data question, or to exercise a right manually, contact the account owner at the email on file. This page is a plain-English summary; a full data-protection notice and DPIA back it (see the product documentation).

LetRight provides document automation and computed compliance information, not legal advice.