Tenancy file service
App privacy notice and terms
Version app-terms-2026-10-04. Applies to the tenancy file app only. The selflandlord.com website and its mailing list have their own privacy policy.
The public frontend currently offers an invented sample only. Account registration and payments are not open. The monthly service terms below describe the planned paid launch.
Seller and data controller
ND Media Ltd, trading as SelfLandlord. Registered address: 17 Gainsborough Road, Reading, RG30 3DB. Contact hello@selflandlord.com.
ND Media Ltd is not VAT registered. No VAT is charged.
Monthly subscription terms and refunds
The One property plan is £5 per month; the Small portfolio plan is £12 per month for up to five properties. These are the total monthly prices. Stripe charges the selected plan on signup and automatically each month until cancelled. There is no annual commitment or trial. Your account page and Stripe show your billing status and paid-through date.
One property space covers the tenancy records at one address. A property with any active tenancy uses one space; an empty property reserves one. A property containing only archived tenancies uses no space. Historical tenancy files at that property can be retained without a separate per-file purchase. Creating or unarchiving a property’s active records requires space in your plan. Plan changes are not available at launch.
Cancel future renewals through Account → Manage subscription in Stripe. Editing continues until the paid billing period ends, then retained files become read-only. A failed renewal does not extend the paid period; update your payment method in Stripe to restore access after payment succeeds. Cancelling or failed payment does not delete your records. Account deletion requires you to end the subscription first so that billing cannot continue for a deleted account.
You can read, print and export retained files after editing access expires. This release includes the checklist, service log, manually entered dates, edit history, PDF report, JSON backup and calendar export. It does not include email reminders or document storage.
You may cancel your initial subscription and request a full refund within 14 days of signup by contacting hello@selflandlord.com with your Stripe receipt or payment reference. You do not need to give a reason. We will process an agreed refund to the original payment method within 14 days. Bank processing can take longer. Later cancellations stop future renewals; there is no automatic pro-rata refund of a paid month. Your statutory rights, including remedies for a faulty or misdescribed service, are unaffected.
Save a copy of these terms for your records. Cancellation wording: “To ND Media Ltd, 17 Gainsborough Road, Reading, RG30 3DB, hello@selflandlord.com: I cancel my SelfLandlord subscription. Signup date: [date]. Payment reference: [reference]. Name and account email: [your details]. Date: [today].”
Access starts after payment is confirmed. A refunded billing period or disputed payment may stop editing access for that period; a later confirmed payment can establish a new paid period. Retained files remain readable and exportable. If a dispute is resolved in your favour, contact support to verify restoration. Contact support before making a second payment while confirmation is pending.
Using your account
Sign in with an account email and password. The email is an account identifier; it is not verified through email. Save the recovery code shown when you create your account. Recovery replaces your password and code and signs out other sessions. We do not send account, password-reset, reminder or marketing emails from this app. Losing both your password and recovery code can make your files inaccessible; support will require evidence of ownership and cannot promise recovery.
The app records information you enter about lettings in England. It is not legal advice, a certificate or a check that you meet legal requirements. It does not calculate legal deadlines, check notices, or store original documents. Keep your original documents and export backups. Do not enter tenant names, contact details, ID numbers, share codes or other tenant personal data in your labels or notes.
What we store and why
We store your account email, the terms acceptance version and date, password and recovery-code hashes, sign-in sessions, property labels, tenancy references, checklist entries, dates and notes. Edit history records the actual previous and saved entries and server time. Individual history entries cannot be edited or removed; they are deleted with the tenancy, property or account. The database operator controls storage, so this is not a tamper-proof record.
We use this information to provide the service you request (contract), and keep hashed rate-limit identifiers and minimal payment-event records to prevent abuse and duplicate processing (legitimate interests). Stripe handles payments and card details; the app stores payment, checkout and price identifiers, purchase terms acceptance and payment/access status, never card details. Stripe may send its own payment receipts and process payment information under its own privacy policy.
Daily counters are aggregate raw requests, not unique people. Global Privacy Control and Do Not Track requests are excluded. The sample file uses invented data in browser memory and resets on refresh. Guided setup temporarily stores a draft in your browser's session storage; it is removed when saved, discarded or you sign out.
Storage and retention
Account records are stored in a Cloudflare D1 database with EU jurisdiction. Cloudflare Workers process requests on its global network; this is not a promise that all processing stays in the EU. Cloudflare and Stripe provide hosting and payment processing with their applicable transfer safeguards.
Your account and tenancy records stay available until you delete them. Account deletion removes owned files, history, password credentials and sessions immediately. Minimal checkout references and payment-event receipts remain without their account link for up to six years for reconciliation and fraud prevention. Stripe keeps its own payment records. Hashed rate-limit records are removed after seven days, expired login/session records after one day, anonymous price-interest records after 90 days and aggregate daily counts after one year. A daily maintenance job applies these periods.
Your choices and rights
You can export your files or delete your account in the app. Ask for access, correction, erasure, restriction or a copy of your personal data at hello@selflandlord.com. You may complain to the Information Commissioner's Office. The app sets only the sign-in cookie and browser storage needed for the requested functions; it does not add you to the SelfLandlord mailing list. The main website has a separate privacy policy and unsubscribe system.