Privacy Policy

1. Controller and scope

Wei Lu, an independent developer (individual / sole trader), is the controller of 租房管家 at https://landlord.morandiai.com. Contact for all data and security requests: support@morandiai.com. This policy covers account and rental records, not the independent practices of assistants or services you choose to connect.

2. Information collected

• Account: registration email, name derived from the email or supplied profile, account identifier, authentication credentials managed by Neon Managed Better Auth, and session information.
• Rental records you enter: properties, room details, tenant names and contact details, leases, charges, receipt entries, deposits and move-out records. Only enter information you are entitled to process; tenants do not log in directly.
• Membership and integration records: subscription and order identifiers, amounts, currency, payment status, billing dates, authorized assistant requests, key metadata and access records. Waffo Pancake processes payment card data; it is not stored on our servers.
• Technical information: request timestamps, IP/network and browser information available to authentication, hosting and security services, error information and rate-limit/access metadata. We do not use advertising pixels or a separate product analytics service in this release.
• Support: messages and information you voluntarily send when requesting help. Do not send passwords, full card details or unnecessary tenant documents.

3. Use and lawful grounds

We use account and rental data to authenticate you, save and display your ledger, provide authorized API access and fulfill the service contract. Subscription information supports billing and access verification. Troubleshooting, preventing abuse and necessary service notices rely on legitimate interests where applicable; legally required records and disclosures rely on legal obligations. Any optional processing that requires consent needs that consent, which may be withdrawn. Landlords remain responsible for a lawful basis and notices to tenants for the records they upload.

4. Cookies and local storage

Necessary authentication cookies support sign-in and session security. Browser storage and IndexedDB hold preferences, account cache, pending offline changes and local demo records; a service worker caches the app shell. Clearing browser data can lose unsynced changes, so synchronize first and use sign-out on shared devices. Blocking necessary cookies can prevent login. No advertising tracking or marketing cookie preference center is currently provided because no such trackers are installed.

5. Service providers and sharing

• Cloudflare serves the web app and API and processes requests through its edge network, including network/security metadata.
• Neon hosts the account ledger and authentication through Neon Managed Better Auth in the Singapore project.
• Waffo Pancake handles checkout, subscriptions and payment card data, returning the transaction and subscription information needed to administer membership.
• Your chosen external AI assistants and API clients receive data and perform actions within the access you authorize. Their providers may process that data under their own policies. Review permissions and revoke unwanted access.

We do not sell personal information. We disclose information when legally required, to protect the service and users where lawful, or with your authorization. A future transfer of the service would require notice and continued protections. Provider policies: Cloudflare, Neon and the privacy terms presented by Waffo Pancake at checkout.

6. Storage, international processing and security

Ledger and login data use the Neon Singapore project. Cloudflare requests may be processed at edge locations internationally, and payment and authorized assistant providers may process data in other jurisdictions. Not all processing occurs only in Singapore. Where required by applicable law, international transfers are subject to appropriate safeguards, including contractual protections.

We use HTTPS, authenticated account access, permission checks and revocable API credentials. No system is risk-free. Report suspected incidents using the contact above. We will notify affected users and competent authorities as required by applicable law, including a 72-hour regulator deadline where it applies. We do not claim security certifications or independent audits that have not been established.

7. Retention and deletion

Stopping paid renewal does not delete the free account or ledger. Account and rental records are kept while the account remains open. On a verified account-closure request, we target deletion or anonymization of ordinary live account and ledger data within 90 days. Closure is handled manually through support; there is no self-service one-click removal of all databases and backups.

We retain support correspondence up to 2 years after resolution; security and access logs up to 90 days; transaction and tax records up to 7 years where required by applicable law. Provider-controlled logs and backups follow the provider’s retention and deletion schedule; deleted data can remain in restricted backups until their rotation. Legal holds and unresolved billing or security disputes may require limited longer retention.

8. Your rights and requests

Depending on your jurisdiction, you may request access, correction, erasure, restriction, objection, portability or withdrawal of consent at support@morandiai.com. We verify identity proportionately and aim to respond within 30 calendar days, explaining lawful exceptions or extensions. You can correct available records in the app and export bill CSVs; CSVs are not a complete personal-data export or backup. Contact support for broader requests, including tenant requests that need coordination with the landlord. You may complain to your local data protection authority.

9. Children and communications

The service is intended for account holders aged 18 or older. It is not offered for direct use by children and has no tenant login. Do not upload children’s data unnecessarily. Contact us about inappropriate collection so we can investigate and remove it where required. This release does not operate a marketing mailing program; necessary account, billing, security and policy notices remain part of the service.

10. Updates and contact

Material changes will be announced in the service or through your account email at least 14 days before taking effect, unless law requires earlier action. The update date appears above. All privacy, deletion, security and support enquiries use support@morandiai.com.