Privacy Policy

This policy explains how Tenify ("we", "the Service") handles personal information. It is written with reference to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Two categories of person are involved: you, the account holder, and the third parties whose details you enter: your tenants and property owners. We act as the operator of the software; you remain the party with the direct relationship to those third parties.

About you: your email address and an encrypted password credential, managed by our authentication provider. We do not store your password in readable form.

About people you record: whatever you choose to enter, which may include tenant and owner names, email addresses, phone numbers, tenancy dates, room allocations, weekly rent, bond held, payment history, arrears position, payment references, and free-text notes.

We use Vercel Web Analytics to count page views and see which parts of the Service are used. It is cookieless, does not follow you across other websites, and does not read the records shown on a page. What it records is the address of the page visited, along with coarse details such as country, browser and device type. Because addresses inside the Service include record numbers (for example /dashboard/tenants/7), those numbers are visible to it, but the names, contact details and financial figures behind them are not.

We use no advertising or marketing analytics, and we do not sell or share this information. The only cookies set are those required to keep you signed in.

Information is used solely to operate the Service for you: to display your portfolio, calculate rent and arrears, record payments, and authenticate your session. We do not sell personal information, and we do not use tenant or owner information for any purpose of our own beyond providing the Service to you.

Your data is held in a managed PostgreSQL database provided by Supabase, running on Amazon Web Services infrastructure in the ap-southeast-2 region (Sydney, Australia). The accounts and credentials used to sign in are hosted in the same Australian region.

This means the personal information you record about your tenants and owners is stored in Australia. The one thing that leaves the country is the page-view counting described in section 2, which is handled by Vercel on servers overseas. That carries page addresses and coarse device details, never the records themselves. If anything else changes, we will update this policy and tell you before the change takes effect, as APP 8 requires.

Access to your data requires authentication. Database rows are segregated by account, and row-level security is enabled at the database so the public API key cannot read stored records. Traffic is encrypted in transit.

No system is perfectly secure. We cannot guarantee absolute security, and you should use a strong, unique password and keep your credentials confidential.

Your data is retained for as long as your account is active. You can delete individual properties, owners, tenants and payment records from within the Service at any time. If you would like your account and its associated records deleted, email us at nepsystechnologies@gmail.com and we will action it.

Please note that you may have separate record-keeping obligations under residential tenancies legislation that require you to retain tenancy and financial records for a set period. Deleting data here does not discharge those obligations.

You can view and correct the data held about you, and the data you have entered about others, directly within the Service. If a tenant or owner asks you for access to information you hold about them, that request is directed to you as the person who collected it, not to us.

If we become aware of unauthorised access to or disclosure of personal information that is likely to result in serious harm, we will notify affected account holders and, where required, the Office of the Australian Information Commissioner, consistent with the Notifiable Data Breaches scheme.

For privacy questions, access requests or complaints, email us at nepsystechnologies@gmail.com. We aim to respond within 30 days. If we cannot resolve your complaint to your satisfaction, you may refer it to the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy. Material changes will be notified through the Service, and the "last updated" date above will change.