Tenants10 Tenants10 Back to tenants10.com

Privacy Policy

Last updated: October 4, 2026

1. Who we are

This Privacy Policy is issued by Tenants10 KlG, Grütstrasse 28, 8134 Adliswil, Switzerland (UID CHE-431.347.772) (“Tenants10”, “we”, “us”, “our”), the controller responsible for the Tenants10 website, web application, and mobile applications (together, the “Service”), except where stated otherwise in Section 3 below.

This Policy is written to comply with the Swiss Federal Act on Data Protection (FADP, as revised, in force since 1 September 2023). Where a user or tenant is located in the European Economic Area, the relevant provisions of the EU General Data Protection Regulation (GDPR) apply in addition.

2. Who this Policy covers

The Service is used by three kinds of people, and this Policy applies to all of them:

  • Staff users — employees of property management agencies, facility operators, contractors, and other business customers who hold an account on the platform.
  • Occupants / tenants — individuals living in or using a building managed through the Service (via the occupant portal or mobile app), invited by one of our business customers.
  • Visitors — people browsing tenants10.com without an account.

3. Our role: controller vs. processor

For a staff user's own account data (login, profile, role, how they use the platform) and for visitors to our website, Tenants10 is the data controller.

For occupant/tenant data entered into the platform by one of our business customers (an agency, landlord, or facility operator) — names, contact details, lease and payment records, maintenance requests, messages, documents, and similar — our business customer is the data controller, and Tenants10 acts as their processor, handling that data only on their documented instructions and under a Data Processing Agreement (see Section 11). If you are an occupant/tenant and have a question about your data, please contact the property manager or organisation that invited you to the platform; they are responsible for responding to your request, and we support them in doing so.

4. Information we collect

  • Account & identity data: name, email, phone number, role, company, language preference, profile picture.
  • Property & tenancy data: building, unit, and lease information; rent and payment records; deposit information; maintenance and work order requests; inspection and compliance records.
  • Documents: contracts, floor plans, invoices, photos, and other files you or your organisation upload, stored in our document storage.
  • Communications: messages sent through the in-app chat, support tickets, and announcements, including their content.
  • Device & usage data: IP address, browser/device type, app version, push-notification tokens, log-in times, and general usage/diagnostic data.
  • Payment data: where billing is processed, payment method details are collected and stored directly by our payment processor (Stripe) — Tenants10 does not store full card numbers.

5. How we use your information

  • Provide, operate, and maintain the Service, including the occupant portal and mobile apps.
  • Process rent payments, maintenance requests, bookings, and support requests.
  • Send account, building, and service notifications (in-app, email, and push).
  • Use AI (including Microsoft Azure OpenAI Service) to help extract and organise information from uploaded documents and to power in-app AI assistants — see Section 6.
  • Automatically translate messages and notices between users who write in different languages (via Microsoft Azure Translator).
  • Maintain platform security, detect abuse, and keep an audit trail of account activity.
  • Comply with legal obligations, enforce our Terms of Service, and protect the rights and safety of our users.
  • Improve the performance and reliability of the Service.

We do not use personal data for automated decision-making that produces legal or similarly significant effects, and we do not sell personal information.

6. AI features

Certain features (such as document data extraction and AI assistants) send the relevant document or message content to Microsoft Azure OpenAI Service for processing. This is done under Microsoft's enterprise data-processing terms, which state that prompts and outputs sent through Azure OpenAI are not used to train Microsoft's or OpenAI's underlying models. AI-generated suggestions should be reviewed by a human before being relied upon for legal, financial, or safety-critical decisions.

7. Who we share information with

We do not sell personal information. We share it only as needed to run the Service:

  • Within your organisation: staff users see occupant/tenant data according to the permissions their organisation assigns them.
  • Sub-processors (listed in Section 8) who host data, send notifications, process payments, or provide AI/translation features on our behalf, under written data-processing agreements.
  • Authorities, where required by Swiss law, a valid legal process, or to protect the rights, property, or safety of Tenants10, our users, or the public.
  • A successor entity, in the event of a merger, acquisition, or sale of assets, subject to the same data-protection commitments described here.

8. Sub-processors & international transfers

Our primary infrastructure (application servers, database, and file storage) is hosted by Microsoft Azure in the Switzerland North region, meaning core platform data is stored in Switzerland. Some features rely on sub-processors that may process data outside Switzerland, in particular the United States:

  • Microsoft Azure (Switzerland North, with some AI/translation calls routed via Azure's regional endpoints) — hosting, database, file storage, document AI extraction, translation.
  • Google Firebase Cloud Messaging (United States) — delivery of mobile and browser push notifications. Push payloads are deliberately generic (a category label only — e.g. "New message" — never names, message content, or amounts) precisely because this channel crosses outside our own infrastructure.
  • Resend — transactional email delivery (account, notification, and password-reset emails).
  • Stripe — payment processing for platform subscriptions, where applicable.

Where personal data is transferred outside Switzerland or the EEA to a country without a recognised adequate level of data protection, we rely on the providers' standard contractual clauses and, where applicable, the EU–US / Swiss–US Data Privacy Framework, as the legal safeguard for that transfer.

9. Data retention

We retain personal data for as long as the related account or organisation is active on the Service, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations — generally up to 10 years for financial and contract records, consistent with Swiss retention requirements (Art. 958f CO). When an organisation closes its account, we delete or anonymise occupant/tenant personal data within a reasonable period, except where longer retention is required by law or agreed with that organisation under the Data Processing Agreement.

10. Cookies & similar technologies

Our website and web application use cookies and similar local storage for essential functions (keeping you logged in, remembering preferences) and, where enabled, for analytics. See our Cookie Policy for the full list and how to manage your choices.

11. Data Processing Agreement (business customers)

If you are a business customer (an agency, landlord, or facility operator) processing your occupants'/tenants' personal data through the Service, our Data Processing Agreement forms part of your contract with us and sets out the scope, purpose, sub-processors, and security measures that apply to that processing, as required under Art. 9 FADP.

12. Data security

We use technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit, role-based access control, audit logging, and regular review of third-party sub-processors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Your rights

Under the FADP (and, where applicable, the GDPR), you have the right to request access to, correction of, deletion of, or restriction on the personal data we hold about you, and to object to certain processing. If your data was provided to us by your property manager or employer (see Section 3), please direct your request to them in the first instance; we will assist them in responding. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland (edoeb.admin.ch), or, if the GDPR applies to you, with your local EU data protection authority.

14. Children

The Service is intended for business use and for adult occupants/tenants. We do not knowingly collect personal data from children.

15. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced in the app or by email to account holders, and the "Last updated" date above will be revised.

16. Contact us

Questions about this Privacy Policy, or to exercise your rights, contact us at: support@tenants10.com , or by post at Tenants10 KlG, Grütstrasse 28, 8134 Adliswil, Switzerland.