How Summit Lease handles your data

Summit Lease runs on servers operated by Summit Lease. Your records are stored in a database there, and any files you upload — receipts, mainly — are stored on the same machine. Nothing is sold, and nothing is shared with advertisers.

• Your account: your email address, your name, and a cryptographic hash of your password. We never store the password itself and cannot recover it.
• If you are a landlord: your properties and units, the people you record as tenants, leases, rent charged and received, expenses, receipt files, and maintenance tickets.
• If you are a tenant: the record your landlord keeps of your tenancy, and your access to their portal.
• Sign-in activity: sessions, so you stay signed in, with the IP address and browser they were created from.

When a landlord records you as a tenant, that record belongs to them. It is their account's business record of a real tenancy — what was charged, what was paid — in the same way a paper ledger would be.

This matters when you delete your account. Your sign-in and your access to their portal are removed. Their record of the tenancy stays with them, because it is theirs rather than yours, and removing it would destroy a landlord's rent history for a property.

Transactional email — verifying your address, resetting your password, and tenant invitations — is sent through a mail service operated by Summit Lease.

Two other kinds of email are optional and separate. Activity notices cover rent due, rent late and leases ending, at most one digest a day and only when there is something in it. News and offers is product marketing, and is never on unless you tick it. Every email of either kind carries a one-click link to stop it, without signing in, and you can change both at any time under Account.

Online rent collection is not enabled. The payment feature in the app is a test-mode demonstration that moves no real money, and live payment credentials are rejected outright.

When it is enabled, it will work through Stripe, with each landlord connecting their own Stripe account so rent goes from tenant to landlord directly. Summit Lease will not hold or route rent, and card details will never reach our servers.

You can delete your account at any time under Account. Deletion is scheduled 30 days ahead rather than happening immediately, so a mistake — or a request made by someone who should not have had access — can be undone by signing in and cancelling it. Every other session is ended as soon as deletion is requested.

After that window everything is permanently removed, including uploaded files. We keep one record that an account existed and when it was deleted, identifying it only by an irreversible hash of the email address, so a later question about the account can be answered without keeping your details.

Backups are kept for a rolling two-week period, so deleted data may persist in a backup until it rotates out.

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. The quickest route to the last one is the Account page. For anything else, contact the person who operates this installation.