Privacy Policy

We collect what's needed to run your compliance register — your account details, the property and certificate information you add, and the usual technical data that comes with running a website. We don't sell your data. It's shared only with the handful of services that help Warden actually work, listed below.

This policy covers anyone who creates a Warden account, including landlords and letting agency users on WardenAdmin. Warden is operated using the contact details at the bottom of this page.

Account details: your name, email address and a securely hashed password (or your Google account identifier, if you sign in with Google).

Property and compliance data: addresses, certificate dates, obligation types, and any documents or certificates you upload.

Payment information: handled entirely by Stripe. Warden never receives or stores your card number — we only keep a reference to your subscription status.

Usage data: basic technical information like pages visited and general device/browser type, collected automatically to keep the service reliable and understand how it's used.

To provide the service itself — tracking your obligations, storing your documents, and reading dates off certificates with WardenAI. To send you account and compliance-related emails, like reminders and receipts. To process payments and keep your subscription up to date. To keep the service secure and working properly.

Warden runs on a small number of specialist services, each used only for what they're named for below. We don't sell or rent your data to anyone, and we don't share it for advertising.

Supabase — hosts our database, authentication and document storage.

Stripe — processes payments and manages subscriptions.

Resend — sends transactional emails (reminders, receipts, account notices).

Anthropic — powers WardenAI's reading of certificates and plain-English guidance.

Google — used only if you choose to sign in with Google.

Vercel — hosts the website and provides basic, privacy-conscious usage analytics.

Some of these providers may process data outside the UK. Where they do, it's under their own standard data protection safeguards.

We keep your data for as long as your account is active. If your account lapses or you cancel, your data stays in place so you can pick up where you left off — it isn't deleted automatically. If you'd like your account and data deleted entirely, email us and we'll action it.

Under UK GDPR, you can ask to see what data we hold on you, have it corrected, have it deleted, export it, or object to how it's used. Email warden.rent.compliance@gmail.com for any of these and we'll get back to you. You can also complain to the Information Commissioner's Office (ico.org.uk) if you think we've got something wrong.

Your data is stored with encryption at rest and in transit, and access to it is restricted by account-level permissions. No system is perfectly secure, but we take reasonable, standard precautions to protect what you store with us.

Warden uses only the cookies needed to keep you signed in, plus lightweight, privacy-conscious analytics to understand how the site is used. We don't use advertising or tracking cookies.

Warden is intended for landlords and letting professionals aged 18 and over, and isn't directed at children.

We may update this policy as the product changes. We'll update the date below whenever we do.

Questions about this policy, or want to exercise any of your rights above? Email warden.rent.compliance@gmail.com.