TenantSheet

Privacy Policy

Last updated: April 16, 2026

1. Introduction

The TenantSheet property management platform ("Service") is operated by Andrew Nguyen, an individual doing business as TenantSheet ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described here, please do not use the Service.

2. Information We Collect

Account Information

When you register for an account, we collect:

  • Name (first and last)
  • Email address
  • Phone number (optional)
  • Password (stored in hashed form)

Property & Tenant Data

In the course of using the Service, you may provide:

  • Property addresses and details
  • Unit information
  • Tenant names, contact information, and emergency contacts
  • Lease terms and financial details
  • Maintenance requests and notes
  • Uploaded documents and photos

Payment Information

Payment processing is handled by Stripe. We do not directly store your full credit card numbers or bank account details. Stripe may collect payment method details, billing address, and transaction history in accordance with their privacy policy.

Automatically Collected Information

When you use the Service, we automatically collect:

  • IP address
  • Browser type and version
  • Pages visited and features used
  • Date and time of access
  • Device information

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process transactions and manage subscriptions
  • Send transactional emails (account verification, password resets, payment confirmations)
  • Send service notifications (lease expirations, rent reminders, maintenance updates)
  • Respond to customer support requests
  • Monitor and improve the Service's performance and security
  • Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising purposes.

4. Information Sharing & Third Parties

We share your information only with the following third-party service providers, solely for the purpose of operating the Service:

  • Stripe — Payment processing for subscriptions and rent payments. Stripe's privacy policy is available at stripe.com/privacy.
  • Resend — Email delivery for transactional and notification emails.
  • DigitalOcean — Cloud hosting and data storage infrastructure.
  • Geoapify — Address autocomplete and geocoding services (address text only, no personal data).

We may also disclose your information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

We retain your account information and associated data for as long as your account is active. After account termination:

  • Your data is retained for 30 days to allow for account recovery
  • After 30 days, your data is permanently deleted from our systems
  • Backups containing your data may persist for up to 90 days before being overwritten
  • We may retain anonymized, aggregated data indefinitely for analytics purposes

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of data at rest
  • Secure password hashing (bcrypt)
  • Role-based access controls and multi-tenant data isolation
  • Regular security updates and monitoring

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

You have the following rights regarding your personal information:

  • Access: You can view your personal information through your account settings at any time.
  • Correction: You can update your account information through your account settings.
  • Deletion: You can request deletion of your account and associated data by contacting us.
  • Data Export: You can request an export of your data by contacting us.
  • Opt-out: You can opt out of non-essential emails through your notification settings.

To exercise any of these rights, contact us at [email protected].

8. Cookies

We use only essential cookies necessary for the Service to function, including authentication tokens. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].