PRIVACY POLICY
Privacy Policy
Last updated: July 5, 2026
Lordaio is a property operations platform for landlords, property managers, team members, and residents. We understand that property records often include sensitive business, financial, and resident information. This Privacy Policy explains what information we collect, how we use it, and the choices available to users of the platform.
1. Introduction
Lordaio is committed to protecting customer information and using it responsibly. We design the platform to support property operations while limiting access to the people and organizations that need it. This policy applies to information collected through Lordaio websites, dashboards, tenant portal features, emails, and related services.
2. Information We Collect
We collect information that users provide directly, information created through use of the platform, and limited technical information needed to operate and secure the service.
Account information. This may include names, email addresses, phone numbers, authentication details, account status, roles, organization memberships, and notification preferences.
Organization information. This may include organization names, business type, timezone, team invitations, ownership roles, permission templates, and organization settings.
Property, tenant, and lease information. Users may store property details, units, tenant profiles, lease dates, rent amounts, ledger activity, statements, move-out or relationship history, and related operational records.
Maintenance and vendor information. The platform may store maintenance requests, work orders, vendor assignments, photos, documents, status updates, notes, and maintenance communications.
Documents and uploaded files. Users may upload receipts, lease documents, maintenance photos, work order documents, and other files connected to property operations.
Payment reporting information. Lordaio may store rent charges, payment reports, manual payment records, payment approval history, allocation information, reminders, and related ledger data. See the Payment Information section below for more detail.
Communications and notifications. We may store messages, conversation metadata, in-app notifications, email delivery attempts, and communication preferences.
Usage, device, browser, and log information. We may collect limited technical information such as browser type, device information, IP address, timestamps, pages visited, authentication events, error logs, and security-related activity.
3. How We Use Information
We use information to operate, maintain, secure, and improve Lordaio. This includes using information to:
- Provide account access and authenticate users.
- Help owners and teams manage properties, units, tenants, leases, maintenance, vendors, documents, communications, and financial records.
- Generate reports, statements, rent ledgers, reminders, and operational summaries.
- Send transactional emails such as invitations, account confirmation, password reset, payment reminders, maintenance notifications, and message notifications.
- Apply user roles, permissions, organization isolation, tenant isolation, and access controls.
- Maintain audit logs, troubleshoot issues, prevent misuse, and protect platform security.
- Improve usability, reliability, and performance of the platform.
- Respond to customer requests and provide support when requested.
- Comply with legal, accounting, security, and operational obligations.
4. Email Communications
Lordaio sends service-related emails that are necessary for account access and property operations. These may include authentication emails, password reset emails, team and tenant invitations, payment reminders, maintenance notifications, communication notifications, and payment report updates.
Where notification preferences are available, users may choose whether to receive certain categories of email notifications. Some security, account, or transactional messages may still be sent when necessary to operate the service.
Lordaio uses Resend as a transactional email provider. Resend processes email addresses, message content, delivery metadata, and related information as needed to deliver and monitor transactional emails.
5. Payment Information
Lordaio currently records payment-related information for property operations, including rent charges, tenant payment reports, manual payments entered by owners or staff, payment allocation records, reminders, and approval or rejection history.
Lordaio does not currently process online payments and does not directly store customer credit card numbers, bank account numbers, or card security codes. If future payment processor integrations are introduced, payment information may be processed by third-party payment providers under their own terms and privacy practices. Lordaio would store only the operational and transaction metadata needed to display records, reconcile activity, and support property management workflows.
6. Information Sharing
We do not sell personal information. We share information only as needed to provide, secure, and operate the platform.
Service providers. We may share information with providers that support hosting, database services, authentication, storage, email delivery, logging, and infrastructure operations.
Within an organization. Information may be visible to owners, co-owners, staff, tenants, or other authorized users based on roles, permissions, and tenant access rules.
Legal and safety reasons. We may disclose information if required by law, legal process, or a good-faith belief that disclosure is necessary to protect rights, safety, security, or platform integrity.
Business changes. If Lordaio is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.
7. Data Security
We use reasonable technical and administrative safeguards designed to protect information. These safeguards may include encrypted connections, authentication, role-based access controls, organization isolation, tenant isolation, private file storage, row-level security, audit logging, and secure infrastructure providers.
No system can guarantee absolute security. Users are responsible for protecting their login credentials, inviting appropriate team members, assigning correct roles, and promptly removing access that is no longer needed.
8. Data Retention
We retain information for as long as accounts or organizations remain active and as reasonably necessary to provide the platform, preserve records, comply with legal or accounting obligations, resolve disputes, maintain security, and support operational history.
Some records, such as audit logs, lease history, maintenance history, payment history, communications, and documents, may be retained even if a user account is disabled or access is revoked, where retention is necessary for business, legal, accounting, or security reasons.
9. User Rights
Depending on the user's role and relationship to an organization, users may request access to information, correction of inaccurate information, deletion of information where appropriate, changes to notification preferences, or account closure.
Some requests may need to be handled by the organization that controls the property or tenant records. We may decline or limit requests when information must be retained for legal, security, accounting, audit, lease, maintenance, or operational reasons.
10. Cookies and Analytics
Lordaio may use essential cookies or similar technologies for authentication, session management, security, and platform functionality. The platform may also collect limited usage and diagnostic information to understand performance, troubleshoot issues, and improve reliability.
At this stage, analytics are limited and are intended to support product quality and operational reliability rather than advertising. Lordaio does not currently use cookies for third-party behavioral advertising.
11. Children's Privacy
Lordaio is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that information from a child under 13 has been collected, we will take appropriate steps to delete it.
12. Changes to This Policy
We may update this Privacy Policy as Lordaio evolves. When we make material changes, we will take reasonable steps to notify users, such as updating the policy date, posting a notice in the platform, or sending an email where appropriate.
13. Contact
For privacy questions or requests, contact us at privacy@lordaio.com.