Privacy Policy

Last updated: October 19, 2026

Landlord Tally ("we") is operated by Rocky Mountain Apps LLC. This policy explains what we collect when you use Landlord Tally and what we do with it.

What we collect

• Account details: your email address and a one-way hash of your password (we never see or store the password itself).
• Your rental records: the properties, tenants, leases, payments, expenses, bookings and receipt images you enter or import. Tenant details are limited to what you type in (typically name, email and phone).
• Receipt reading (only when you use it): when you ask the app to read a receipt, the photo or PDF is sent to Anthropic, whose Claude AI reads the vendor, date, amount and category for you. Anthropic processes it to return that answer; under its commercial terms it does not use this data to train its models. If you forward invoices to your private receipts address, we accept mail only from the address you sign in with, read its attachments (or the email text) the same way, and keep them as the expense's receipt.
• Bank sync (only if you connect a bank): you sign in to your bank in a window run by Stripe (Stripe Financial Connections), our bank-connection provider. That window names Rocky Mountain Apps LLC, the company that runs Landlord Tally, as the business you are sharing data with; we never see your bank password. We receive read-only access to the accounts you choose to share: account names, the last four digits, and transactions (date, description, amount). Disconnecting a bank, or deleting your account, ends our access straight away. We cannot move money. Bank lines you mark as not rental are kept for 90 days so you can restore them; then their description, amount and date are erased.
• Bot protection: the sign-up and password-reset forms use Cloudflare Turnstile to tell people from bots. Cloudflare may receive your IP address and browser details to do this.
• Billing: if you subscribe, Stripe processes your payment. We receive a customer ID, plan and status from Stripe; we never see your card number. We keep Stripe's anonymous fingerprint of the card (not the number) so each card gets one free trial, even if an account is deleted.
• Technical data: standard request logs (IP address, browser type, time) kept by our hosting provider for security and troubleshooting.

How we use it

Only to run the service: to sign you in, store and show your records, create the reports and documents you ask for, send password-reset emails, and handle billing. We do not sell your data, show ads, or use your records to train AI models.

Who processes it for us

• Cloudflare (hosting, database, file storage, email delivery and Turnstile bot protection) (United States and global edge network)
• Stripe (subscription payments, and bank connections if you connect a bank) (United States)
• Anthropic (reading receipts, only when you ask it to) (United States)
• Resend (account and reminder emails)

Spreadsheet imports

When you import a spreadsheet, the file is read in your own browser. Only the records it contains are sent to us; the file itself is not uploaded or kept.

How long we keep it

While your account is open. If your account has no plan (a trial or subscription ended) for 24 months, we delete it, after emailing you 30 and 7 days before with a link to download everything. A new account whose email address is never confirmed is deleted after 30 days, after we email you a week before. Delete your account in Settings and your records and receipt images are deleted straight away; backups held by our providers expire within 30 days. Export everything first from Reports if you want a copy.

Your rights

You can see, export, correct and delete your data yourself in the app. For anything else, contact us at support@landlordtally.com. Depending on where you live you may also complain to your data-protection authority.

Cookies

We use one essential cookie to keep you signed in. No tracking or advertising cookies.

On our public pages (not inside the app) we count visits with Customerbound, an analytics tool we use. It sets no cookies. It keeps a random visitor ID in your browser's local storage so we can tell which pages and campaigns lead to sign-ups. It is switched off for visitors in the EEA, UK and Switzerland, and when your browser sends Global Privacy Control or Do Not Track.

Changes

If we change this policy in a way that matters, we'll tell you by email or in the app before it takes effect.