Security & privacy

Property managers trust us with their tenants' data. Here we describe openly what is already in place and what we will put in place before launch.

In placePlanned before launch

This website

Analytics only with consent
In place
Google Analytics only loads after you agree in the cookie banner. Without consent we set no tracking cookies. We embed no third-party content such as YouTube or Google Maps.
Self-hosted fonts
In place
Fonts and icons are served from our own server, not from external CDNs.
HTTPS and security headers
In place
All connections are encrypted with TLS. Strict security headers such as a Content Security Policy protect against common attacks.
Spam protection without tracking
In place
The contact form uses Cloudflare Turnstile instead of a classic CAPTCHA – without tracking cookies.

Encryption in transit and at rest
Planned before launch
Data is encrypted in transit with TLS and stored encrypted at rest.
Hosting location
Planned before launch
We will publish the hosting location and sub-processors here once they are final.
Data processing agreement (DPA)
Planned before launch
Customers receive a DPA under Art. 28 GDPR. The property manager remains the controller of their tenants' data.
Access control
Planned before launch
Roles and permissions ensure staff and tenants only see what they are allowed to see.
Data minimisation
Planned before launch
We only collect the data needed for communication and delete it after defined periods.

No payments on this website
In place
This website does not currently process any payments.
Hosted checkout
Planned before launch
For subscriptions we will use a specialised payment provider with a hosted checkout. Card details are entered there directly and never touch our servers.
SEPA Direct Debit and invoice
Planned before launch
Alongside credit cards we plan to offer SEPA Direct Debit and invoice – as is common in German B2B.

Please report potential security issues confidentially. You will find our contact details in our security.txt.