Last updated November 2, 2026

Privacy Policy

This Privacy Policy describes how TenantBinder (“TenantBinder”, “we”, “us”, or “our”) collects, uses, discloses, and retains information in connection with the TenantBinder website, web portal, and mobile applications, together with all related products, features, and services (collectively, the “Service”). This Privacy Policy is incorporated into and forms part of our Terms of Use.

Who we are. TenantBinder is run by one person, not a company. The controller of the personal data described here — the person who decides why and how it is handled — is Evgeniy Antropov, a private individual in Cyprus. There is no company behind the Service and no registered office, so there is no postal address we can give you. Write to [email protected]. That address reaches the controller directly, and it is the address for every request described in this Policy.

Any dispute, controversy, or claim arising out of or relating to this Privacy Policy or our data practices is handled as set out in Governing Law and Disputes in the Terms of Use, where arbitration and the class-action waiver apply only to users who live in the United States.

1. Information We Collect

We collect information you provide directly, information generated when the Service is used, and information collected automatically. Depending on how you and the other parties to your agreements interact with the Service, this may include:

• Account and identity data: name, legal name used for signing, email address, phone number, sign-in details, account identifiers, and account settings;
• Agreement data: information entered into or generated around rental agreements and related documents — property details, lease terms, rent and deposit amounts, names and contact details of landlords, tenants, occupants, guarantors, and representatives, negotiation history, approvals, change requests, and comments;
• Signing and verification data: one-time verification codes sent to your email and phone and the fact and time of their confirmation, drawn signature images, consent records, document fingerprints, IP addresses, device identifiers, and timestamps forming the record of each signing;
• Uploaded content: documents and files you store with the Service. Certain documents are end-to-end encrypted; we cannot read their contents, only basic details such as file names, sizes, and dates;
• Purchase data: subscription status, product identifiers, and transaction details received from the Apple App Store or Google Play. Payment is processed by Apple or Google under their own terms; we do not collect or store your payment card details;
• “Add with AI” requests: what you type when you ask for changes, and, if you speak instead, the voice recording until it is turned into text, and the text of what you said;
• Change requests from a tenant: the words of the request and the term it is about, and, if the tenant says it instead of typing it, the voice recording until it is turned into text;
• “Explain simply” and “In short”: the text of the paragraph, or of the whole agreement, you ask us to put in plain words, which names the parties and their contact details, and your app language;
• A paper lease you scan: the photos of its pages, and what is read from them — names, the address, the rent, the dates and the lease’s own words;
• Communications: correspondence with our support and the contents of messages you send us;
• Usage and device data (collected automatically): IP address, device, browser and operating system information, application version, language, log and diagnostic data, crash reports, the features, screens and pages you use, the actions you take, and information about the link or ad that brought you to our website or app.

If you enter someone else’s details — a tenant, a landlord, an occupant, a guarantor — we are the controller of that information too, not you and not us on your behalf. You are responsible for the details you enter being correct, and for having a reason to enter them. When you invite a tenant, we tell them by email that you gave us their details and how to reach us about it.

2. How We Use Information

We use the information we collect for the following purposes:

• to provide, operate, maintain, and improve the Service, including creating, negotiating, signing, and delivering agreements between the parties;
• to verify signer identity, generate and preserve signing audit trails, and maintain the evidentiary integrity of executed documents;
• to create, administer, and secure accounts, and to communicate with you about the Service, including transactional, technical, and security notices you cannot opt out of;
• to send marketing and product communications where permitted by law (you may opt out of marketing communications at any time);
• to analyze usage, monitor performance, debug, and develop new products and features;
• to understand how people find us, and to measure which advertising leads people to our website and to install and use our app;
• to detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Use;
• to comply with legal obligations, enforce our agreements, and establish, exercise, or defend legal claims.

Only information that is anonymous under applicable data protection law is treated as non-personal data. De-identification alone does not necessarily make information anonymous.

We do not make decisions about you based solely on automated processing.

Where the law asks us to name a ground for what we do, these are the grounds, purpose by purpose:

• Creating, negotiating, signing, and delivering agreements — performance of a contract. This is the Service you asked us for, and it cannot be done without this information;
• Writing changes with “Add with AI” — performance of a contract. It creates and edits the agreement you asked for, and only when you ask it to;
• Putting the agreement in plain words with “Explain simply” and “In short” — performance of a contract. It retells the agreement you are reading, and only when you ask it to;
• Reading a paper lease you scan — performance of a contract. It writes the lease you already signed into the app, and only when you scan one;
• Verifying a signer’s identity and keeping the signing record — performance of a contract, and a legitimate interest in the record holding up later. A signature is worth little if nobody can show afterwards who signed it and when;
• Running and securing accounts, and sending transactional messages — performance of a contract. You cannot have an account, or be told what happened to your agreement, without them;
• Keeping executed documents and their audit trails — a legitimate interest in evidence, and a legal obligation where one applies. Every party to a signed agreement may need to prove years later what it said;
• Analytics and measuring our advertising — a legitimate interest in knowing how our website and app are used and how people find them, or your consent where we ask for it. You can turn analytics off in your phone’s settings for TenantBinder, and you can change your cookie choices as described in Section 6;
• Recording purchases, renewals and refunds — a legitimate interest in knowing that paying for the app works. We keep this record even when analytics is turned off;
• Marketing messages — consent. You give it when you ask for them, and you withdraw it with the unsubscribe link in any of them;
• Answering a legal request — a legal obligation. Where a law, a court, or an authority requires us to produce something, we have no choice about it.

3. How We Share Information

We do not sell your personal information for money.

These are the companies that receive personal data when you use the Service. We have no data-processing contract with any of them beyond the terms each of them publishes for its own service, and we do not claim otherwise.

• Amplitude — analytics, to understand how people use our website and app. It receives a user identifier, your IP address, device and browser information, and information about how you use the Service, including your purchases and how our AI features performed for you. It never receives the words you type or say to our AI features, or the photos of a lease you scan. Amplitude keeps our data in its European region;
• OpenRouter, and through it OpenAI and ElevenLabs — only when you use “Add with AI”, “Explain simply” or “In short”, when a tenant sends a change request, when you scan a paper lease, or when we translate wording of an agreement into its second language. They receive what you type or say, the photos of a lease you scan, and the parts of the agreement needed to answer, such as its terms, region and language. OpenAI writes the text and ElevenLabs turns speech into text. When you scan a paper lease, we ask OpenRouter to use only providers that do not keep what they are sent or use it for training;
• Airbridge, run by AB180 Inc. — measuring which ads and links lead people to our website and to install and use our app. It may receive your IP address, device and advertising identifiers, device and browser information, information about the link or ad that brought you to us, your account identifier, and events such as installs, sign-ups and sign-ins, free trials, and subscriptions with their price. Airbridge shares free-trial and subscription events with Apple Ads, Google Ads and Meta, so each can measure its own ads. In some regions we ask for your consent before Google receives this information. Airbridge also sets a cookie on our website. We never share the contents of your agreements or documents with Airbridge or with any advertiser. To the extent this counts as a “sale” or “sharing” under applicable state law, you may opt out as described in our Do Not Sell or Share My Personal Information notice;
• Crisp, run by Crisp IM SAS in France — the support chat, only when you open it in the app or the portal. It gets what you write and the files you send, and, so we know who is writing: your account id, email address, phone number, your name as it stands on your agreement, your plan and its state, the numbers of your agreements, whether you are a landlord, tenant or agent, your region, and the app version and platform. It never gets the contents of your agreements or documents, or anything about the other people on them. Crisp keeps the chat on servers in the EU;
• Postmark — every email we send: your address and the contents of the message;
• Twilio and Telnyx — verification text messages: your phone number and the code;
• Cloudflare — delivering and protecting our website and servers. It processes your IP address, information about your browser or device, and the requests you make to the Service;
• Our hosting provider in France — everything the Service stores;
• Google Firebase Crashlytics — crash reports from the app: what went wrong, the device and app version, a random account number (not your name, email, phone number or address), and the app’s state at the time: whether you are a landlord, tenant or agent, the app language, the number of the agreement you had open, your plan, and your last actions in the app. Crash reports are sent even when analytics is turned off;
• Apple and Google — purchases and refunds, and delivery of push notifications. If you sign in with your Apple or Google account, they also see that you signed in to TenantBinder, and they pass us the name and email address held on that account;
• DigiCert, Sectigo, Apple, and FreeTSA — a document’s fingerprint, and nothing else, so that a signed document carries a trusted timestamp.

We also share information in these situations:

• Other parties to your agreements. The Service exists to share agreement data between the parties: landlords, tenants, and their representatives see the agreement content, party names and contact details, statuses, signatures, and audit information relevant to their agreement. Executed documents are delivered to every party;
• Professional advisors, such as lawyers, auditors, accountants, and insurers, in connection with the services they provide to us;
• Authorities and other parties where we believe in good faith that disclosure is appropriate: to comply with a law, regulation, subpoena, court order, or other legal process; to respond to a lawful request; to enforce our Terms of Use; to protect the rights, property, or safety of TenantBinder, our users, or others; or to detect, prevent, or address fraud, security, or technical issues;
• Successors. If TenantBinder is ever transferred to a company or another person, your information may move with it, and this Policy will continue to apply to it.

4. Text Messages (SMS)

The only text messages we send are one-time verification codes. TenantBinder does not send marketing, promotional, or advertising text messages, does not operate recurring or subscription SMS programs, and does not text you about anything other than a code you asked for.

How you ask for a code. We send a text message only when you, signed in to your own TenantBinder account, sign a document addressed to you, accept the Electronic Records and Signatures Disclosure and Consent — which explains that a mobile phone able to receive SMS is one of the two ways we confirm a signer’s identity — confirm the mobile number the code should go to, and ask us to send it. You may correct the number before the code is sent.

Frequency and cost. One message per request — normally one per signing, plus any resend you ask for, within limits we set. Message and data rates may apply under your mobile plan; we do not charge you for the message. Delivery depends on mobile carriers we do not control, and we do not guarantee that any message will arrive.

Stopping messages. Because each message is a one-time code you request, simply not requesting one stops them. You may also reply STOP to any message to stop text messages from that number, and HELP for help, or contact [email protected]. Stopping text messages does not affect email, and does not close your account — but a signing cannot be completed electronically without the text-message check, because that check is part of how the signature is verified.

We do not share your mobile number, or your consent to receive text messages, with any third party or affiliate for their own marketing or promotional purposes. No mobile information obtained through the text-message verification described here is sold, rented, or shared for such purposes. We share the number only with the companies that send the message or run the Service for us, as listed in Section 3, and with the other parties to your agreement where the number is part of it.

What we record. The mobile number, when a code was sent and whether it was delivered, and when it was confirmed, are recorded as part of the signing record and retained as described under “Data Retention”.

EEA and UK. In the EEA and the UK, we use your mobile number to perform the signing you asked for, to prevent fraud and keep the signing record, and to meet legal duties; you have the rights described in Section 12.

United States. Text messages sent under this section are transactional messages sent at your request. They are not telemarketing, and we do not use automated dialing to send marketing messages. Your consent to receive a verification code is not a condition of any purchase.

Availability. We can send verification codes only to mobile numbers in the countries the Service supports at the time. If we cannot text your number, the signing cannot be completed electronically.

5. Agreement Content and Encrypted Documents

Information entered into agreements is stored and processed to operate the Service — to display, synchronize, negotiate, sign, and deliver your documents — and for the other purposes described in this Privacy Policy. We do not use the contents of your agreements to build advertising profiles and do not sell them.

Documents stored in the encrypted binder are end-to-end encrypted. We cannot read them, and we cannot review, produce, restore, or recover them — including at your own request — if the keys needed to open them are lost. You are responsible for safeguarding keys in your control and for keeping your own copies of important documents.

6. Cookies and Similar Technologies

We and our service providers use cookies, local storage, software development kits, and similar technologies to run the Service (sign-in, security, preferences), to understand how our website and app are used, and to measure which advertising leads people to our website and app, as described in Section 3. Essential technologies cannot be turned off without breaking the Service, and turning others off may affect how the Service works.

Where we ask for your choice, you can change it at any time on our website. You can also block or delete cookies in your browser settings, and limit advertising identifiers in your device settings.

7. Data Retention

We retain information for as long as we consider it necessary for the purposes described in this Privacy Policy, including operating the Service, complying with legal obligations, resolving disputes, enforcing agreements, and maintaining business records, and thereafter for the duration of any applicable limitation periods.

Executed documents are different. Signed agreements, their final executed versions, and the associated signing audit trails have ongoing evidentiary value for every party to them. We may retain them, and the verification records supporting them, for at least seven years after signing — and longer where the nature of the document, a legal obligation, a legal hold, or a dispute warrants it — even if you delete your account or ask us to erase your data. Deleting your account does not delete executed documents or audit trails, and does not remove copies already delivered to other parties.

“Add with AI” requests. What you typed, and the text of what you said, are kept with the request until the agreement or your account is deleted. Voice recordings are not kept once they have been turned into text.

“Explain simply” and “In short”. We keep the plain-words answer until the agreement or your account is deleted. We do not keep the text you asked about.

A tenant’s change request prepared by AI. The AI notes for the landlord and the change prepared from the tenant’s words are kept with the agreement until it is deleted. Voice recordings are not kept.

A paper lease you scan. We do not keep the photos of its pages or the text read from them once the reading is done. What was read is saved into your agreement, and the scan of the lease is stored end-to-end encrypted with the agreement’s other documents, until the agreement or your account is deleted.

Residual copies may persist in routine backups for a period after deletion. We may retain and use aggregated or anonymized data indefinitely.

8. Security

We use reasonable technical and organizational measures to protect your information, but no system is completely secure. Please keep your devices and sign-in details safe.

9. International Transfers

The servers that run TenantBinder are in France, so that is where your data is stored. The United Kingdom recognises the EEA as giving adequate protection, so data from the UK is covered by that finding.

Some of the companies listed in Section 3 process data outside the EEA, including in the United States, the United Kingdom, Singapore, Japan, and South Korea: Cloudflare, Postmark, Twilio, Telnyx, Airbridge, Apple, Google, OpenRouter, OpenAI, ElevenLabs, and Crisp for parts of its service. Amplitude keeps our data in its European region, and Crisp keeps the support chat in the EU. Each of these companies publishes its own transfer terms; we have not negotiated a separate transfer agreement with any of them, and we are telling you that rather than implying one exists.

10. Your Choices and Rights

Depending on where you reside, applicable law may give you rights with respect to your personal information, such as the right to access, correct, delete, or receive a copy of it, to object to or restrict certain processing, or to withdraw consent. We honor these rights as the law where you live provides.

To exercise a right, contact us at [email protected], or write to the controller directly at [email protected]. We may require verification of your identity, and, where an agent submits a request, written proof of authorization. Requests are subject to the conditions and exceptions applicable to the specific right under applicable law. Retention of a signed document does not by itself exclude other applicable rights. We will respond within the time required by applicable law.

Getting a copy of your data. You can download a copy of your personal data from the app at any time.

Complaining. If you are in the EEA or the UK and you are not happy with how we handle your data, you can complain to your country’s data protection authority. You do not have to come to us first.

Turning analytics off. In the app, you can turn analytics, Airbridge included, off at any time in your phone’s settings for TenantBinder; on our website, you can block or delete cookies in your browser, which limits what we can connect to you. We still record purchases, renewals and refunds, and how our AI features and lease scans worked for you, and crash reports are still sent.

We do not discriminate against you for exercising rights applicable law gives you. You may opt out of marketing communications at any time via the unsubscribe mechanism or by contacting support; transactional and security communications are part of the Service and cannot be opted out of while you maintain an account.

11. US State Privacy Disclosures

For residents of US states with comprehensive privacy laws (including California): the categories of personal information we collect are described in Section 1; the purposes are described in Section 2; the categories of recipients are described in Section 3. We do not sell personal information for money. Our use of advertising, attribution, and measurement tools may constitute “selling” or “sharing” of limited device identifiers and of the free-trial and subscription events described in Section 3 under some state laws; you may opt out as described in our Do Not Sell or Share My Personal Information notice. We treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of your personal information. We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law without the required consent. We do not knowingly process personal information of consumers under 16 for sale or sharing. California’s “Shine the Light” law: we do not disclose personal information to third parties for their own direct marketing purposes. To exercise rights under these laws, or to appeal a refusal, contact [email protected].

12. Your Rights Where You Live

The European Economic Area and the United Kingdom (GDPR, UK GDPR). You can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to erase it, ask us to stop or to limit what we do with it, ask for it in a form you can take elsewhere, object to processing we base on a legitimate interest, and take back any consent you have given. Write to [email protected]. If you are not happy with the answer, you can complain to your country’s data protection authority.

We have not appointed a representative under Article 27 of the GDPR for the European Union, and none under the UK GDPR for the United Kingdom. There is no local representative to write to. Write to [email protected].

Brazil (LGPD). You can ask us to confirm that we handle your personal data, to show you what we hold, to correct it, to make it anonymous or delete it, to give it to you in a form you can take elsewhere, and to tell you who we share it with. You can also take back any consent you have given. Write to [email protected].

India (DPDP). You can ask to see the personal data we hold about you, ask us to correct or complete it, ask us to erase it, and name someone to act for you if you cannot act yourself. If something goes wrong, write to [email protected] — that is our grievance route, and the same person reads it and answers it.

13. Children

The Service is intended for users who are at least 18 years old, and we do not knowingly collect personal information from anyone under 18 (or under 13 for the purposes of COPPA). If we learn that we have collected personal information from a child, we will take reasonable measures to delete it. If you believe a child has provided us personal information, contact [email protected].

14. Third-Party Services

The Service may contain links to, or interoperate with, websites and services operated by third parties, including Apple and Google. This Privacy Policy does not apply to third-party websites or services, we are not responsible for their privacy practices, and we encourage you to review their policies. Information you disclose directly to a third party (including to another user outside the Service) is not governed by this Privacy Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy at any time and for any reason. The updated version will be indicated by the “Last updated” date above and is effective when posted. Where a change needs your agreement, we will ask you for it. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have questions or comments about this Privacy Policy or our data practices, or wish to exercise a privacy right, contact us at [email protected].