Privacy Policy

ManageMyRent (“ManageMyRent,” “we,” “us”) operates the website at managemyrent.com and the ManageMyRent application (together, the “Service”). This policy applies to everyone who touches the Service: landlords and their team members who hold an account, and tenants and prospective tenants who reach the Service through a link their landlord sent them.

We process information in the United States. Questions about this policy go to privacy@managemyrent.com.

We play two different roles, and the difference decides who you should ask first.

For a landlord’s account, we decide how the account information is used. In privacy-law terms we are the controller (and, under California law, the business).

For tenant and lease information a landlord stores or asks us to handle, the landlord decides what is collected and why. We act on the landlord’s instructions as a processor (and, under California law, a service provider). The landlord’s own privacy notice governs that information, and their choices about it are the ones that apply.

If you are a tenant, the fastest path for an access or deletion request is your landlord, because the record is theirs. We will help them act on it, and we will honour a request sent to us where the law requires us to.

From landlords and team members

When you create a workspace we collect your email address, and the name and phone number you choose to add. Sign-in happens by one-time magic link or with Google. With Google we receive your name, email address and Google account identifier; we never see your Google password. We also store the workspace name, the properties and units you create, the team members you invite, and your settings.

From and about tenants

Tenants do not create accounts. A landlord enters, or uploads from a lease or a spreadsheet, a tenant’s name, mobile number, email address, unit, lease terms and rent. When a tenant opens a signed link, they can submit a repair report with a description and photos or short video, and they can pay rent. We record that a link was opened and what it was used for; the link itself is a signed token that expires, and we store a hash of the token rather than the token itself.

Payments

Rent is charged and paid through Stripe. Stripe Connect routes money into the landlord’s own Stripe account, so ManageMyRent is not the merchant of record for a tenant’s rent. We receive and store the amount, fee, currency, payment method, status and Stripe identifiers (the account, Checkout session, PaymentIntent and charge ids), plus the payer name and memo the landlord sees. We do not receive or store card numbers, bank account numbers or security codes. A photographed check or cash receipt is stored as an image in the landlord’s workspace and is visible only to that landlord and their team.

Waitlist

If you join the waitlist before launch, we store the email address you give us and a one-way hash of your IP address, which exists to prevent duplicate and abusive sign-ups. The address itself is not stored in the waitlist table.

Technical information

Our hosting and database providers keep standard server logs (such as IP address, browser type and the pages requested) as part of running the Service. If an error occurs, our error monitoring provider may receive a technical report containing the error, the route, and limited request details. We do not run advertising networks, behavioural analytics or session replay on the Service.

• To run the Service: show your queue, timeline, ledger and documents, and keep your workspace separate from every other landlord’s.
• To sign you in and keep your account secure.
• To prepare the messages and signed links you send to tenants. We prepare them; you send them.
• To generate charges, reminders and the Morning Brief on the schedule you have configured.
• To process payments through Stripe and reconcile them against the ledger.
• To read and classify the documents, reports and receipts you upload, as described below.
• To provide support, fix errors, and keep the Service available and secure.
• To comply with the law and respond to valid legal process.

We do not use your information for a new purpose without telling you first, and we never use tenant information to advertise to tenants.

Some features use a third-party AI model through OpenRouter to turn a document or a message into a structured record: a lease into its terms, a tenant’s repair report into a category and urgency, a receipt or check photo into an amount and date. When a feature needs this, the relevant text and images are sent to the model provider for that single request. OpenRouter routes the request to a model provider, which processes it on OpenRouter’s and its own terms.

The model reads; it does not decide. No legal notice, no message asking for money and no payment is written or sent by a model. Money, legal notices and screening decisions always wait for a human to approve them, and a failed or uncertain read falls back to a form the landlord fills in.

We share information only with service providers that need it to run the Service, and only for the purposes above. They are bound by contract to use it for us and not for their own marketing.

• Supabase for the database, file storage and sign-in infrastructure.
• Vercel for application hosting.
• Stripe for payment processing and connected-account onboarding.
• Resend for transactional email — sign-in links, the Morning Brief and landlord notices.
• OpenRouter and the model providers behind it for the AI-assisted reading described above.
• Trigger.dev for scheduled jobs such as charge generation and reconciliation.
• Sentry for error monitoring, when it is enabled.
• Google when you choose to sign in with Google.

We also disclose information where the law requires it, where we need it to establish or defend a legal claim, to protect the safety of a person, or as part of a merger, acquisition or sale of assets. If that happens, the receiving party is bound by this policy. We do not otherwise share information between landlords: one workspace cannot see another.

• We do not sell personal information, and we do not share it for cross-context behavioural advertising.
• We do not run advertising networks or sell audience data.
• We do not send messages to tenants on your behalf. There is no outbound messaging provider in the Service; your own phone or email performs the send.
• We do not require a tenant to create an account, install an app, or set a password.
• We do not let a model write a legal notice or a request for money, and we do not let automation approve a payment.

We use cookies that are necessary for the Service to work — to keep you signed in and to protect requests. We do not set advertising or analytics cookies. Your theme preference (light or dark) is kept in your browser’s local storage under the keymmr-themeand never sent to us.

Signed-in areas of the Service are not intended for caching by search engines or third parties. Because we do not track you across sites, there is no cross-site tracking for a Do Not Track signal to switch off.

We keep landlord account information and workspace records for as long as the account is open, and for as long afterwards as the law, tax rules or a legal claim requires. Tenant, lease and payment records belong to the landlord’s workspace and are kept on the landlord’s schedule; deleting a workspace deletes its records.

Signed links expire on a schedule set by their purpose, and we store only a hash of the token. Waitlist addresses are kept until launch or until you ask us to remove them. Server logs and error reports are kept for a short operational window and then discarded.

We encrypt information in transit, limit access to people who need it to operate the Service, hash signed-link tokens, and enforce that every query is scoped to one landlord’s workspace. We also keep database-level policies as a backstop for the few paths that do not go through the application.

No system is perfectly secure. If we become aware of a breach that affects your information, we will notify you and the authorities as the law requires.

Depending on where you live, you may have the right to know what personal information we hold about you, to access it, to correct it, to delete it, to obtain a portable copy, and to appeal a decision we make about a request. You may also have the right not to be discriminated against for exercising these rights.

Send a request to privacy@managemyrent.com. Tell us which right you are exercising and the email address or link the request concerns. We may ask you to confirm that you are the person the information is about before we act. We respond within 45 days, and we will tell you if we need the additional 45 days the law allows.

A landlord’s tenant information is controlled by the landlord, so we will forward a request about it to them and help them respond. Because we do not sell personal information or use it for targeted advertising, there is nothing to opt out of there.

If you are in the EEA or the United Kingdom, we process information in the United States to perform our contract with you, to comply with the law, and for our legitimate interest in running and securing the Service; you may also contact us to exercise the equivalent rights.

The Service is for adults. It is not directed to anyone under 18, and we do not knowingly collect information from a child. If we learn that we have, we will delete it. If you believe a child has sent us information, email privacy@managemyrent.com.

We may update this policy as the Service changes. We will post the new version here with a new effective date, and if the change is material we will tell account holders by email before it takes effect. Continuing to use the Service after a change means you accept the updated policy.

Questions, requests or complaints about privacy go to privacy@managemyrent.com. If you need our postal address, ask and we will provide it.