Privacy Policy | EstateTrack

1. Overview & Data Controller Roles

EstateTrack operates as a cloud-native property management platform. We distinguish between two primary roles:

Landlords as Data Controllers: Landlords control tenant personal data (names, national ID/passport numbers, leases, payment records) uploaded to their portfolio.
EstateTrack as Data Processor: EstateTrack provides the secure infrastructure, automated reconciliation pipelines, and notification relays to process this data on the landlord's instruction.

2. Categories of Data Collected

Identity & Profile Data

Name, verified email, telephone number, user role (landlord, caretaker, tenant), hashed authentication credentials.

Property & Portfolio Data

Property names, location coordinates, unit inventories, utility meter readings, lease durations, rent obligations.

Transaction & Payment Records

Transaction reference codes, payment amounts, bank settlement timestamps, digital receipt hashes (raw payment card details are never stored).

Telemetry & Security Logs

IP addresses, browser client signatures, edge security events, audit logs of status alterations and plan mutations.

3. Multi-Tenant Isolation Architecture

EstateTrack strictly guarantees tenant and landlord data isolation using PostgreSQL Row-Level Security (RLS). Database policies verify cryptographic JWT claims on every single read and write query. Landlord A can never inspect, query, or mutate records belonging to Landlord B.

4. Third-Party Service Providers

We do not sell personal information. We partner only with SOC-2 and ISO 27001 compliant infrastructure providers:

Database & Auth: Supabase Inc. (AWS Data Centers with AES-256 encryption at rest).
Email Communications: Resend Technologies Inc.
Payment Rails: Safaricom (M-Pesa API), Pesapal, and Paddle.

5. Data Retention & Right to Deletion

Landlords retain full autonomy to export their tenant and payment ledgers in CSV/JSON formats. Upon permanent portfolio deletion by authorized administrators, all associated properties, units, and tenant links are purged in accordance with our cascade protocol.

6. Privacy Inquiries

To exercise data access, rectification, or deletion requests, contact:
privacy@estatetracksystem.com