Privacy Policy
Template for founder review before launch. CertSafe is the data controller for the personal data described here (UK GDPR).
What we store
Your email address, the property and tenancy details you enter, the compliance dates and any certificates you upload, and basic usage events. We do not ask for or store tenant personal data beyond what you choose to enter.
Why we store it
To provide the service: to compute your compliance deadlines, send you reminders, and manage your subscription. This is necessary to perform our contract with you.
Processors we use
- Supabase — database, authentication and document storage (hosting your data).
- Resend — sending reminder and account emails.
- Paddle — payment processing as merchant of record.
- Vercel — application hosting.
Retention
We keep your data while your account is active. If you cancel, your data is retained in read-only form unless you request deletion.
Your rights
Under UK GDPR you can access, correct, export or delete your personal data, and object to processing. Email us and we will action deletion on request.
Email preferences
Every reminder email includes a one-click unsubscribe link, and you can turn off the digest in Settings at any time. Account-essential emails (such as sign-in links) are always sent.
Cookies
We use a small number of essential cookies for authentication. If analytics are enabled we use a privacy-friendly, cookieless analytics provider.