Privacy Notice

Assetra is operated by Austin Pula (“we”, “us”), based in the United Kingdom. For the personal data described here we act as the data controller. Where you upload information about your tenants, you are the controller of that data and we process it on your behalf as your processor, solely to provide the Service.

What we collect and why

• Account data (name, email address, login credentials, passkey public keys) — to create and secure your account. Legal basis: performance of our contract with you.
• Content you add (property addresses, tenancy details, tenant names and contact numbers, rent and payment records, uploaded statements, certificates and documents) — to provide the Service. Legal basis: performance of our contract with you.
• Support messages — to answer your questions. Legal basis: legitimate interests in supporting our customers.
• Usage and technical data (device and browser information, IP address, log and error data) — for security, fraud prevention, diagnosing faults and improving the product. Legal basis: legitimate interests in a secure, working service.
• Subscription records (plan, status, renewal dates) — to give you the features you paid for. Legal basis: contract and legal obligation (accounting).

We do not collect or store your card details. Payment data is collected directly by Paddle. Biometric data used for Face ID, Touch ID or a passkey never leaves your device — we only store a public key.

Who we share data with

• Service providers / subprocessors — cloud hosting and database providers, email delivery, and AI providers used to read documents you upload.
• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as accountants or lawyers, where necessary.
• Authorities where we are required to by law.

We never sell personal data.

International transfers

Some providers process data outside the UK/EEA. Where that happens we rely on UK adequacy regulations or on Standard Contractual Clauses with the UK International Data Transfer Addendum, together with appropriate technical safeguards.

Retention

We keep your account and content for as long as your account is active. If you delete your account, we delete or anonymise your data within 30 days, except where we must retain records (for example billing records kept for six years for tax purposes). Logs are kept for a short period for security and diagnostics.

Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls that scope every record to your account, hashed credentials, passkey support and least-privilege access to production systems.

Cookies

We use essential cookies and local browser storage to keep you signed in and remember your preferences. These are required for the Service to work. We do not use advertising cookies. You can clear or block cookies in your browser settings, though the Service may not function correctly without the essential ones.

Your rights

Under UK GDPR you have the right to access, rectification, erasure, restriction, data portability, to object to processing based on legitimate interests, and to withdraw consent where we rely on it. Contact us and we will respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Contact

Austin Pula — support@pulaproperties.online