Privacy notice

Last updated: 13 October 2026

This notice explains how Steadlet handles personal data. It covers this website and the Steadlet apps for owners, managers and tenants. We handle personal data in line with the EU General Data Protection Regulation (GDPR), and everything is stored in the European Union.

Who is responsible

You can reach us at contact@steadlet.com.

There are two roles, and they are different:

• For the account holder’s own details (the landlord who signs up, and any manager they invite), Steadlet decides why and how the data is used. We are the controller.
• For the details of tenants and other people a landlord records (names, contact details, tenancy terms, requests, documents), the landlord decides what to record and why. The landlord is the controller and Steadlet processes the data on the landlord’s behalf. A tenant who wants to use their rights should write to their landlord or to us, and we will pass it on.

What we collect

From owners and managers

• Name, email address, password (stored only as a one-way hash), language and account settings.
• The plan you choose and your billing details when paid plans start.
• A log of changes made in the account, with who made each one.

About tenants and other people, entered by the landlord or by the tenant

• Name, email address and, where entered, phone number.
• The home and address, the tenancy, its contract terms and key dates.
• Repair and maintenance requests with their descriptions, photos, status and cost.
• Rent expected and payments the landlord has marked as received. Steadlet does not collect or move money.
• Documents the landlord uploads and chooses to share.

Technical data

• Error reports from the apps and the server, with a correlation ID and without names, email addresses or other personal details.
• Server logs of requests, which refer to people by an internal identifier and not by name or email.

This website

• This website sets no cookies and has no analytics, advertising or tracking scripts, and loads nothing from other companies.
• The apps use only the cookies they need to work, such as keeping you signed in and remembering your language.

Why we use it, and on what basis

• To provide the service to the landlord and their tenants: performance of a contract (for the account holder) and the landlord’s legitimate interest in managing the tenancy (for tenant data).
• To send the emails the service needs, such as sign-in links, invitations and deadline reminders: same basis.
• To keep the service secure, find faults and prevent abuse: our legitimate interest.
• To meet legal obligations, such as tax and accounting records for our own business.

We do not sell personal data. We do not use it for advertising or profiling.

Where it is kept

All application data, uploaded files and backups are kept on servers in the European Union. Nothing is stored or processed outside it. The service providers we rely on, for hosting and for sending email, are bound by contract to keep the data in the EU as well.

Who we share it with

Only with the service providers that process it on our behalf, for hosting and for sending email, and only for the purposes above. Each of them works under a data processing agreement. Account holders can ask us for the current list. Within an account, people see only what their role allows: an owner sees everything, a manager sees the homes assigned to them, and a tenant sees their own tenancy. We may disclose data if the law requires it.

How long we keep it

• Account data is kept while the account is open. After closure it is deleted or anonymised within a period we will state here once decided.
• On the Free plan, closed requests stay visible for 12 months.
• Tenant data is kept for as long as the landlord keeps the tenancy record, and a landlord can delete it. Tax and accounting records may need to be kept for the period the law sets.

Your rights

You can ask for a copy of your data, for it to be corrected or erased, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use a right, write to contact@steadlet.com. We answer within one month.

If you are unhappy with our answer you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or to the authority in your own country.

Security

Data is encrypted in transit. Access to the database is limited by account, so one account cannot read another’s data. Tenants sign in with a one-time link sent to their email and have no password to lose. We keep personal details out of logs and error reports.

Changes

If we change this notice in a way that matters, we will say so here and, for account holders, by email.