Privacy Policy & Data Protection

1. Introduction

Landager ("we," "our," or "us") provides a property management Software-as-a-Service (SaaS) platform designed for independent landlords. We understand that you entrust us with sensitive financial, property, and tenant data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (landager.com) and use our application (dashboard.landager.com).

By accessing or using our services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

2. Our Role (Data Controller vs. Data Processor)

Under the General Data Protection Regulation (GDPR) and similar global privacy frameworks, the distinction between a Data Controller and a Data Processor is crucial:

Landager as a Data Controller: We act as a Data Controller for the direct account information you (the landlord/user) provide to us to create your account and bill you for our services.
Landager as a Data Processor: You act as the Data Controller for all tenant and property data you input into our platform. Landager acts strictly as a Data Processor for this information. You decide what tenant data to collect, and we process it only according to your instructions (by storing it and surfacing it in your dashboard).

Landlord Responsibility: As the Data Controller of your tenants' data, you are legally responsible for ensuring you have a lawful basis (such as consent or legitimate interest) to collect their Personal Identifiable Information (PII) and enter it into the Landager platform.

3. Information We Collect

We collect information dynamically based on how you use our platform:

A. Information you provide to us directly (Controller Data)

Account Data: Name, email address, secure password hash (using bcrypt), and avatar images.
Billing Data: Processed securely via our Merchant of Record, Lemon Squeezy. Landager does not natively store your full credit card numbers.
Communications: Support tickets, feedback, and customer service inquiries.

B. Information you input into the platform (Processor Data)

Property Data: Property addresses, unit configurations, and property photos.
Tenant Data (PII): Tenant names, email addresses, phone numbers, and emergency contact details.
Financial & Contractual Data: Lease agreements (PDFs), rent amounts, payment records, expense receipts, and maintenance requests.

C. Information collected automatically

Device & Usage Data (Analytics): Nous analysons la santé de la plateforme et les tendances d'utilisation à l'aide d'outils tels que Google Analytics. Pour protéger votre vie privée, nous respectons strictement les exigences de consentement européennes et britanniques via Google Consent Mode v2. Vous avez un contrôle granulaire sur la collecte de données à des fins d'analyse et de débogage via notre bannière initiale de préférences en matière de cookies.
Advertising & Marketing: Where permitted by your explicit consent, we may utilize ad tracking and personalization identifiers (`ad_storage`, `ad_user_data`, `ad_personalization`) strictly to measure our marketing campaigns. We do not track these parameters without your opt-in.
Essential Cookies & Local Storage: We use strictly necessary cookies/tokens required for authentication (Auth.js) and local storage to save your UI preferences, language selections, and your granular cookie consent configuration. Because these are required to provide the core service, they cannot be disabled.

4. AI Features & Data Processing

Landager offers an integrated "Landager AI" chat feature. To provide this intelligent assistance, your chat prompts and relevant contextual dashboard data (such as anonymized property stats or rent amounts) are securely transmitted via API to our AI provider, Google (Gemini API).

Zero Data Training Guarantee

We use enterprise-grade API agreements with Google. Your prompts, tenant data, and financial information are NEVER used by Google to train or improve their foundation models. Data sent to the AI is processed ephemerally solely to generate your response and is then discarded by the API provider.

5. How We Use Your Information

We use the collected information strictly to operate and improve our SaaS product:

To provide, secure, and maintain the Landager dashboard.
To process subscriptions and send transactional emails (receipts, password resets).
To authenticate users and prevent fraudulent activity.
To power AI Chat insights based on your portfolio data.
To respond to your support requests and legal obligations.

7. Data Retention & Security

Security: We implement multi-layered technical measures, including 256-bit encryption in transit (HTTPS/TLS) and encrypted database connections. Passwords are never stored in plaintext.

Retention: We retain your Account Data for as long as your account is active. If you delete your account, or request deletion, we will purge all your property, tenant, and financial data from our live databases within 30 days, unless legally required to retain it for tax or legal compliance (e.g., billing records).

8. Compliance Alert Subscriptions

On our property compliance documentation pages, we offer optional email alert subscriptions to notify you when landlord-tenant laws change in your selected jurisdiction.

Data Collected: When you subscribe, we collect your email address, selected country and region, content language preference, IP address (for abuse prevention and legal basis evidence), and the source of subscription (popup or inline form).

Legal Basis: Explicit opt-in consent (Article 6(1)(a) GDPR). The consent checkbox is unchecked by default and must be actively selected.

Double Opt-In (EU/EEA/UK): If your selected jurisdiction is within the EU, EEA, or United Kingdom, we require email confirmation (double opt-in) before activating your subscription. A verification email will be sent to the address you provide.

How We Use This Data: Solely to send email notifications when compliance documentation for your selected jurisdiction is updated. We do not use this data for marketing, advertising, or share it with third parties.

Unsubscribe: Chaque e-mail d'alerte comprend un lien de désabonnement en un clic. Vous pouvez également nous contacter à [email protected] pour demander la suppression.

Retention: Subscription data is retained until you unsubscribe. Upon unsubscription, your record is soft-deleted (marked inactive) and permanently purged within 30 days.

9. International Data Transfers

Landager operates infrastructure globally. Your data may be transferred to and processed on servers located in the United States or the European Union. By using Landager, you consent to this transfer. We utilize Standard Contractual Clauses (SCCs) to ensure data transferred outside the EEA maintains GDPR-equivalent protection levels.

10. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on where you reside, you possess specific rights regarding your personal data:

Right to Access: You can view all your data within the dashboard.
Right to Rectification: You can edit and update any inaccurate data.
Right to Erasure ("Right to be Forgotten"): You may delete your account and request full data deletion.
Right to Data Portability: You may export reports representing your data.
CCPA Specifics: California residents have the right to know categories of data collected and request deletion. Landager does not sell or share your personal information for targeted cross-context behavioral advertising.

If a tenant contacts us directly to exercise their rights regarding data you uploaded, we will forward that request to you, the Data Controller, for resolution.

11. Contact Us & Data Protection

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to contact our Data Protection Officer, please email us directly at:

[email protected]

Politique de confidentialité