Privacy Policy

1. Information we collect

• Account information: your name, email address, avatar, a hashed password and a hashed passcode. We never store your password or passcode in plain text.
• Organization information: organization name, description and logo, and the members you invite with their roles.
• Data you enter: owners and their ownership shares, assets and their valuations and cashflows, loans and debts, money transfers, properties, units, leases and rent payments.
• Third-party personal data you enter, such as tenant names, contact details and national ID numbers. You are responsible for having the right to record this information.
• Files you upload, such as images, floor plans, contracts and other documents.
• Broker integration credentials (for example Interactive Brokers or eToro tokens) that you provide so we can import your positions and transactions.
• Basic technical data such as IP address, browser type and request logs, collected by our hosting provider for security and troubleshooting.

2. How we use your information

• To provide the service: showing your portfolio, calculating values and net worth, generating rent schedules and reports.
• To authenticate you and keep your account secure, including one-time codes, password resets and passcode checks.
• To send service emails such as verification codes, invitations, password resets and, if enabled, reminders.
• To sync data from brokers you have connected.
• We do not sell your data, use it for advertising, or use third-party analytics or tracking tools.

3. Service providers

We rely on the following providers to run the service. They process data only as needed to provide their part of it:

• Cloudflare: application hosting, file storage (R2) and request logs.
• Our PostgreSQL database host: storage of all account and organization data.
• An email delivery provider: sending service emails to the addresses involved.
• Google Maps: shown when you pick a property location; Google receives your IP address and map interactions.
• Interactive Brokers and eToro: contacted with the credentials you provide, only if you connect them.
• Market data providers (such as nerkh.io): we only request public prices from them and send them no personal data.

4. Organizations and access

Data you enter belongs to your organization. Every member of the organization can view it, and access between organizations is separated in the database. Organization administrators manage who is a member.

5. Cookies and local storage

We use strictly necessary cookies to keep you signed in: an encrypted session cookie and a database access token cookie. Your browser's local storage keeps interface preferences such as theme colors and expanded folders. We do not use advertising or analytics cookies.

6. Security

Connections are encrypted (HTTPS), passwords and passcodes are hashed, sessions are encrypted, private files are kept in a non-public bucket, and database rows are restricted to your organization. No system is perfectly secure, so please use a strong password and keep your passcode private.

7. Retention and deletion

We keep your data while your account or organization is active. You can edit or delete records at any time. To delete your account or your whole organization, contact us and we will remove the data, except where we must keep it for legal reasons or until it ages out of backups.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Asset lists can be exported as CSV from the app; for other requests, contact us.

9. Changes to this policy

We may update this policy. When we make material changes we will update the effective date above and, where appropriate, notify you in the app or by email.

10. Contact

For privacy questions or requests, contact the administrator of this service through the contact details on rsalut.com.