Privacy Notice

Who we are

OAC Property Management ltd, a company registered in England and Wales, trading as OAC Property Pal ("we", "us"), provides property portfolio software. For the account data described below we act as the data controller. Where you upload information about your tenants, you are the controller of that data and we process it on your behalf.

Personal data we collect

• Account data: name, email address, phone number, password credentials.
• Property and tenancy records you enter: addresses, tenant names, contact details, rent amounts, payment history, notes and uploaded documents.
• Support messages you send us.
• Technical data: IP address, device and browser information, log and error data.
• Usage data: pages viewed and features used, to keep the Service reliable.

Why we use it and our legal basis

• To create your account and provide the Service — performance of our contract.
• To send task and compliance reminder emails you have enabled — contract and consent.
• To keep the Service secure and prevent fraud or abuse — legitimate interests.
• To provide customer support — contract and legitimate interests.
• To improve reliability and fix errors — legitimate interests.
• To comply with legal and accounting obligations — legal obligation.

Who we share it with

• Service providers acting as our processors: cloud hosting, database and file storage, and email delivery.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
• Other users you choose to share with: portfolio members you invite, and tenants you link to a property (who can see the documents and rent records you make visible to them, and your contact details if you enable sharing).
• Professional advisers such as legal and accounting support, where needed.
• Authorities where we are required to do so by law.

We do not sell your personal data. Some of our providers process data outside the UK/EEA; in those cases transfers rely on adequacy decisions or Standard Contractual Clauses.

How long we keep it

We keep account and property records for as long as your account is active. After you close your account we delete or anonymise the data within a reasonable period, except where we must keep records to meet legal, tax or accounting obligations.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, row-level database rules that restrict data to the account it belongs to, and signed time-limited links for document downloads.

Your rights

You have the right to access, correct, erase, restrict or object to our processing of your personal data, to data portability, and to withdraw consent for reminder emails at any time. Contact us using the details in your account settings and we will respond within one month. You can also complain to the UK Information Commissioner's Office or your local supervisory authority.

Cookies

We use essential cookies and local storage only — to keep you signed in and to remember preferences. We do not use advertising cookies. Checkout pages are provided by Paddle and use cookies necessary to process your payment.