Privacy Policy

Account information. When you create an account we collect your name, email address, and a password (stored only as a cryptographic hash — we cannot see it).

Property management data. Landlords enter information into PremisePad to run their business: property details, tenant names and contact information, lease terms, rent amounts and payment records, maintenance requests, documents, photos, and notes. This data belongs to the organization that entered it.

Payment information. Payments are processed by Stripe. Card numbers and bank account details are collected and stored by Stripe, not by PremisePad — we store only payment metadata such as amounts, dates, statuses, and Stripe reference identifiers.

Usage and log data. We keep standard operational records — such as sign-in sessions, emails we sent on your behalf, audit trails of account activity, and error logs — to keep the service secure and reliable.

We use your information to provide and operate the service: processing rent payments, sending transactional emails (rent reminders, receipts, invites, overdue and lease-expiration notices), responding to support requests, securing accounts, preventing abuse, and improving the product. We do not use your data for third-party advertising, and we do not sell it to anyone.

If you use the tenant portal, most of your information in PremisePad was entered by, and is controlled by, your landlord or property manager. We process it on their behalf to provide the portal, payment, and communication features. For questions about the accuracy of your records, or to request changes or deletion, contact your landlord first — they control that data. You can also reach us directly using the contact details below.

We share data only with the service providers required to run PremisePad:

Cloudflare — hosting, database, and file storage. Stripe — payment processing and payouts. Resend — transactional email delivery.

Each provider processes data only to deliver its service to us. Beyond that, we disclose information only if required by law, to protect the rights and safety of our users, or as part of a business transfer (in which case this policy would continue to apply).

We use only essential cookies: a signed session cookie to keep you logged in and small preference cookies (such as your current organization). We do not use advertising cookies or third-party tracking.

A public rental listing page counts how many times it was viewed, so the landlord can tell whether the listing is reaching anyone. No cookie is set and no advertising or third-party service is involved.

To avoid counting the same person twice in one day, we combine your IP address and browser user-agent with a secret that changes every day, and store only the resulting one-way code. Your IP address is never stored. Because the secret changes daily, the code is different tomorrow, so these records cannot be linked together into a history of one person's browsing. They are deleted after a few days.

We also record which site you arrived from, as a bare domain name only (for example “facebook.com”) — never the full address, which can contain search terms or other details. The landlord sees daily totals and a list of domains. They are never shown anything that identifies an individual visitor.

We keep your data while your account is active. If you close your account or ask us to delete your organization's data, we will delete it from our production systems, except where we must retain records to comply with legal, tax, or accounting obligations (for example, payment records). To request deletion, contact us at the address below.

We take reasonable measures to protect your information: encrypted connections (HTTPS) everywhere, hashed passwords, signed and revocable sessions, organization-level data isolation, and audit logging of sensitive actions. No system is perfectly secure, but protecting your data is a core design goal — not an afterthought.

You can view and update your account information in Settings, log out other devices, and export your data from within the app. You may also contact us to access, correct, or delete personal information we hold about you. We'll respond to reasonable requests within 30 days.

PremisePad is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from minors.

If we make material changes, we'll update the effective date above and notify account holders by email or an in-app notice before the changes take effect.

Questions about this policy or your data? Email us at support@premisepad.com or visit our contact page. PremisePad is operated from Pensacola, Florida, USA.