Data Processing Addendum

Parties and roles

This Data Processing Addendum applies when a landlord uses Tenant Drive to process personal data about tenants, occupants, guarantors, contacts, payment workflows, documents, properties, or rental records.

For that landlord-entered rental data, the landlord is the controller and Tenant Drive is the processor. Tenant Drive is controller for its own account, support, security, and platform-administration data.

Processing instructions

Tenant Drive processes landlord-controlled personal data only to provide, secure, maintain, support, and improve the service; to follow landlord instructions in the app; to comply with law; and to use subprocessors necessary for those purposes.

Landlords are responsible for ensuring they have a lawful basis, required notices, and authority to enter tenant/rental data into Tenant Drive.

Confidentiality and security

Tenant Drive limits access to personal data to people and providers who need it for service operation, support, security, or legal compliance and who are bound by confidentiality or equivalent obligations.

Tenant Drive uses appropriate technical and organizational measures considering the nature of the service, including access controls, authentication, transport security, backups, logging, and operational safeguards.

Subprocessors

Tenant Drive may use subprocessors for hosting, storage, email delivery, authentication, payment processing, monitoring, support, and related operations. The current list is published on the Subprocessors page.

Tenant Drive remains responsible for requiring subprocessors to protect personal data consistently with this DPA.

Assistance, breach notice, and deletion

Tenant Drive will provide reasonable assistance for data-subject requests, security, breach assessment, and compliance obligations where the request concerns landlord-controlled data and the landlord cannot reasonably handle it alone.

Tenant Drive will notify affected landlord controllers without undue delay after becoming aware of a personal-data breach involving landlord-controlled data.

On termination or valid deletion request, Tenant Drive will delete or return landlord-controlled data where reasonably available, subject to backups, legal obligations, accounting records, security logs, and dispute handling.