What is GDPR?

The General Data Protection Regulation (GDPR) is a European privacy law that went into effect on May 25, 2018. Its purpose is to protect the personal data of EU citizens and give them more control over how their information is collected, stored, and used. GDPR requires businesses to process personal data fairly and lawfully, enable individuals to exercise legal rights over their data (such as access, correction, or deletion), and enforce strong security protections.

---

Who does GDPR apply to?

GDPR applies to all organizations operating within the EU, as well as those outside the EU that handle the personal data of EU individuals. Personal data includes any information that can identify a natural person, such as:

• Name

• Email address

• Phone number

• IP address

• Payment details

---

Tenantum as a Data Controller

When you create an account or use Tenantum, we may collect and process the following information:

• Email address (for authentication, communication, and notifications)

• Name (for personalization of your account)

• Phone number (optional, for account and tenant/landlord communication)

• Profile photo (optional, for personalization)

• Billing details (processed securely by Paystack or Dodo Payments)

• Usage analytics (to improve our services and provide better support)

Important: Tenantum does not store payment card or bank details directly. All payment processing is handled by Paystack and Dodo Payments, which are PCI-DSS compliant.

---

You as a Data Controller

If you use Tenantum to manage properties, tenants, leases, or payments, you may collect personal data from your tenants or landlords (for example, names, emails, payment records, or lease details).

As the account owner, you are responsible for ensuring GDPR compliance when collecting and processing this data. Tenantum provides tools to help you comply, including:

• Managing tenant/landlord information (view, edit, or delete records)

• Exporting data upon request

• Permanently deleting leases, invoices, or associated data

---

Tenantum as a Data Processor

When landlords and property managers use Tenantum, we act as a Data Processor on their behalf. This means we process and store tenant/landlord data securely but do not own, share, or sell it.

Tenantum ensures:

• Tenant and landlord data is stored securely in Neon’s EU-based database infrastructure

• Strong security measures (encryption, backups, role-based access) are implemented

• Account owners have the ability to manage and delete collected data

---

Our Subprocessors

To operate efficiently, Tenantum relies on trusted third-party vendors:

We carefully review and monitor these subprocessors to ensure they meet strong security and privacy standards.

---

Your Rights Under GDPR

As a Tenantum user, you have the right to:

• Access your data (request a copy of your stored information)

• Request deletion (permanently remove your account and associated data)

• Correct or update data (e.g., name, email, billing info)

• Limit data usage (opt out of marketing emails and non-essential analytics)

To exercise any of these rights, please contact us at support@tenantum.com.

---

Security and Data Protection

• All data is encrypted in transit (HTTPS/TLS 1.2+) and at rest.

• Access to customer data is restricted and logged.

• Regular backups and disaster recovery processes are in place.

• In the event of a data breach, Tenantum will notify affected users within 72 hours, in line with GDPR requirements.

---

Final Notes

Tenantum is committed to protecting your privacy and ensuring transparency in how your data is handled. If you have questions about GDPR compliance, data handling, or security practices, contact us at support@tenantum.com