Privacy Policy

AutoLet ("we", "us") provides property management software for UK landlords. This policy explains how we process personal data under UK GDPR and the Data Protection Act 2018.

Data we collect

• Account data: name, email, password (hashed by our auth provider).
• Portfolio data: properties, tenants, rent, leases, maintenance, communications you enter.
• Tenant data you upload: names, contact details, tenancy information.
• Technical data: session cookies, IP address, device/browser type (security & operation).
• Payment data: processed by Stripe; we do not store full card numbers.

How we use data

• Provide and improve the AutoLet service.
• Send transactional emails (verification, rent reminders, maintenance, portal invites) via our email provider.
• Process subscriptions and support requests.
• Comply with legal obligations and prevent fraud.

Legal bases

We rely on contract (providing the service), legitimate interests (security, product improvement), and consent where required (e.g. non-essential cookies). You are responsible for having a lawful basis to process tenant data you enter into AutoLet.

Processors & international transfers

We use Supabase (hosting/database), Resend (email), Stripe (payments), and optionally OpenAI (AI assistant). These providers may process data outside the UK with appropriate safeguards. A list is available on request.

Retention

We retain account and portfolio data while your account is active and for a reasonable period after closure unless law requires longer retention.

Your rights

You may access, rectify, erase, restrict, or object to processing, and request portability where applicable. Contact us at hello@autolet.app. You may complain to the ICO (ico.org.uk).

Contact

AutoLet, United Kingdom (update NEXT_PUBLIC_LEGAL_REGISTERED_ADDRESS). Email: hello@autolet.app.