PRIVACY NOTICE
Your home data deserves careful handling.
Effective: August 30, 2026
Operator: Dapsalmy Group of Companies Limited
This notice explains how Leasvio handles personal information across its public website, property-team workspace and Leasvio Resident web, iOS and Android experiences. It is written to describe the service that operates today.
Who is responsible
Dapsalmy Group of Companies Limited operates Leasvio. A landlord, property manager, housing provider, condominium or other property organization using Leasvio may decide why and how tenancy or property records are handled. For those records, that organization may be the responsible data controller and Leasvio processes information to provide the contracted service. For Leasvio account, security, public-site and platform-operation data, Dapsalmy Group of Companies Limited is responsible. We coordinate with the relevant property organization when a request concerns records it controls.
Information we handle
- Identity and contact information: name, email address, phone number and account or household identifiers supplied by you or an authorized property organization.
- Home and tenancy information: property, unit, lease, household, application, move-in or move-out, inspection, amenity, visitor and building-service records.
- Financial and transaction information: balances, invoices, receipts, payments, deposits and related accounting records. Leasvio does not claim to store full payment-card credentials unless a separately disclosed payment integration is configured.
- Content and communications: maintenance reports, landlord requests, neighbour-room messages, waste reports, notices, support content, documents and other information you choose to submit.
- Preferences: notification choices, quiet hours, accessibility-related requests and resident experience settings.
- Account, device and security information: hashed passwords and recovery tokens, session identifiers, browser or device user-agent, approximate network information or privacy-hashed IP-prefix signals, timestamps and security/audit events.
- Public-site activity: listing searches, inquiry details and the technical requests needed to deliver and protect the website.
Information is collected when you or an authorized property team enters it, when you communicate or take an action in Leasvio, and automatically when the service needs technical and security signals to deliver a request. The resident native shell has no camera, precise-location, microphone, photo-library, advertising, analytics or cross-app tracking permission or plugin.
Why we use information
We use information to authenticate accounts; provide tenancy, billing, document, maintenance, community, communications and support functions; route requests to the correct property organization; prevent abuse and investigate security events; maintain backups and service reliability; comply with legitimate property, accounting, safety, dispute and legal obligations; and respond to privacy requests.
Leasvio does not sell personal information, does not use resident information for third-party targeted advertising, and does not use the resident app to track people across apps or websites owned by other companies.
How we protect information
Leasvio uses encrypted HTTPS transport, secure and HTTP-only session cookies, hashed passwords and sensitive tokens, organization and property access boundaries, server-side authorization, audit evidence, restricted database roles, encrypted backup copies and monitoring. No online service can promise absolute security; suspected privacy or security issues can be reported to [email protected].
Retention and deletion
Leasvio keeps information only for as long as needed for the purposes above, an organization's documented retention schedule, an active legal hold, or a legitimate property, accounting, safety, fraud-prevention, dispute or legal obligation. Different records therefore have different periods; we do not promise a single period that would be inaccurate for every property and jurisdiction.
Resident sessions are issued for up to 30 days and can be revoked sooner. Password-reset links expire after 30 minutes. Short-lived authentication throttle and recovery-attempt records are designed to age out after two days. Operational records may be retained longer when the property organization or law requires them.
A resident can request deletion of the entire account and associated user-created data from Profile → Security & devices → Account & data or through the public account-deletion page. We remove or de-identify data that is no longer required and explain categories retained for a legitimate obligation. A pending request can be cancelled from the same signed-in control until review has advanced beyond the cancellable stage.
Your choices and rights
Depending on where you live and the role of your property organization, you may request access, correction, export, deletion, restriction or objection, and may withdraw consent where consent is the basis for processing. Residents can manage notification preferences and quiet hours in Updates, manage signed-in devices and passwords in Security & devices, and request account deletion in Account & data.
Email [email protected] from the address associated with your account. Describe the request and the property organization involved. We may verify identity and may refer property-controlled records to that organization. You may also complain to the privacy or data-protection regulator that applies where you live.
Changes to this notice
We will update this page when Leasvio's data practices materially change and revise the effective date. A material change may also be communicated inside the service or by email when appropriate.
Contact
Dapsalmy Group of Companies Limited
Leasvio data-protection team
[email protected]