How your lease is protected.
A lease carries the address you live at, what you earn a month, and your signature. Here is a straight account of where all of that sits.
Files are encrypted end to end
Every document on an agreement — the signed lease, its certificate, move-in photos, meter readings, receipts, anything either side uploads — is encrypted on the device before it is sent, and stays encrypted where it is stored. What sits on our disks is an opaque blob, not a file with a name and contents.
The key for an agreement is split in two. One half travels inside the invite link, in the part after the #, which browsers never send to a server — so that half genuinely never reaches us. The other half is held server-side and is released only after somebody has proved, with a code to the address on the lease, that they are on that agreement. When it is released it is sealed to the requesting device's own key, so nothing in between ever sees it either.
A device that does not have the key shows you a locked screen and offers to nudge the people who do. It never shows you scrambled text, and it never quietly gives up and shows you nothing.
How far the sealing goes
"End-to-end encrypted" is a phrase that gets stretched. Here is exactly how far ours goes, so you can rely on it.
Encrypted end to end
- The signed lease and the disclosures attached to it
- The signing certificate
- Every file either side puts in the binder — photos, scans, receipts, notices
Not encrypted end to end
- The lease's terms as data — rent, dates, deposit — which the app has to read in order to show them to you and to check them for you
- Names, email addresses and phone numbers on the agreement
- Change requests, approvals and the agreement's history
That second column lives in our database. It is protected by access rules that let each person reach only the agreements they are on, and it is encrypted in transit and at rest by the storage it sits on. It is not encrypted end to end, and we say so plainly: the app has to read those terms in order to check them for you against the rules of all 50 states and the District of Columbia.
The rest of the answer
- Who can reach an agreement
The people on it, and nobody else. Every read goes through rules enforced by the database, not by the app asking nicely.
- How you prove it is you
Codes sent to the address and the phone number on the lease. Whatever account you happen to sign in with, the agreement is bound to the contact details the lease names.
- How long documents are kept
A document that was actually executed, and the records proving how it was signed, are kept for at least seven years — that is what makes a signature worth anything years later. The full retention terms
- Deleting your account
You can do it yourself, from inside the app, without emailing anyone. What survives is the signing evidence on documents that were genuinely executed, and you are told that before you confirm — because those signatures are advanced rather than qualified, that evidence is the proof.
- Selling your data
We do not. There is a page about that, and it honours the Global Privacy Control signal your browser can send. Your privacy choices
- What is on this website
No analytics, no trackers, no third-party scripts, no fonts fetched from anywhere. This site is served under a policy that permits nothing to load from another host — the pages you are reading make no request off this domain at all.
Read the actual documents
Everything above is the summary. The binding versions are the privacy policy, the terms, and the electronic-signature disclosure.