Privacy policy

Last updated 24 October 2026.

Who operates TennanSeed?

TennanSeed is operated by Oluwatomiwa Elijah Abiade, known publicly as Elijah Abiade, Founder and Senior Engineer, as an individual operator. The operator is responsible for personal information processed for TennanSeed’s own account, security, support and service administration purposes.

Correspondence address: 86–90 Paul Street, London, EC2A 4NE, United Kingdom.

Privacy and support contact: support@tennanseed.com.

What this policy covers

This policy explains how TennanSeed handles personal information when you visit the website, create or use an account, join a workspace, submit an issue report or contact support. A landlord, property manager or other workspace customer may separately be responsible for personal information they upload or manage in TennanSeed.

Information we handle

• Account and security information: name, email address, password hash, session information, login attempts and security records.
• Workspace and property information: property addresses, maintenance requests, work updates, compliance dates, costs, team membership and invitations.
• Rent and property documents: workspace members can record tenant or unit references, rental periods, amounts due, currency, payments received, payment dates and references, and property document titles, categories, original filenames and uploaded PDFs or images. These are available to authorised members of that workspace; viewers have read-only access. Document files are stored privately and opened using short-lived links. Rent records do not collect or transfer money. Use only information you have permission to manage, and contact support for corrections or removal that cannot be handled in the app.
• Files and communications: photos or other attachments added to work records, public issue reports submitted through a property team’s link, and messages sent to support.
• Service and technical information: information needed to run the service, send account-related emails, protect accounts, investigate errors and process requests.
• Subscription information: if paid plans are introduced, plan selection, subscription status and transaction-related records needed to administer the subscription. Payment-card information should be handled by the payment provider if one is used, rather than stored by TennanSeed unless expressly disclosed.

Please do not upload unnecessary sensitive personal information, identity documents, payment-card details or information about children into property records.

Property listings and authority evidence

Listing drafts are private to the workspace. Title and authority documents, declared legal names and review notes are restricted to workspace owners, administrators and platform reviewers. We use evidence to assess advertising authority and prevent abuse, including independent checks where appropriate; uploading documents does not establish legal ownership. Provide only relevant information and redact unrelated sensitive details. We do not require everyone to upload identity documents.

Publication requires an explicit customer declaration and consent followed by administrator approval. Only the approved listing description, price, city/region, property details, processed photos and chosen contact email become publicly browsable. Private street addresses are not copied automatically, and authority documents are not published. Display photos are re-encoded to remove metadata such as GPS coordinates; the original upload remains private. Public information can be copied by others. Withdrawing removes a listing from our public browsing, but cannot recall copies already obtained elsewhere. Short-lived photo links may remain valid briefly.

Evidence and audit records are retained only while needed to provide the service, investigate fraud or disputes and meet applicable legal obligations. Removing a file from a listing hides it from the listing but does not immediately erase stored evidence or release its storage allowance. Contact support for permanent deletion or a retention review. Files are not represented as malware-scanned or legally authenticated.

Education pilot information

The setup guide records your declared account purpose, optional property role (owner, agent or business) and optional institution to personalise guidance. These declarations do not change account permissions or establish verified status. The education pilot records your optional institution, lecturer approval, classroom membership, invitation email addresses and private exercise snapshots. Selecting student, educator or business is not institutional or identity verification. Classroom invitations require the invited account to confirm its email; they expire after seven days. Class owners with approved lecturer access can view the names and email addresses of students who join their class, join dates and invitation statuses. Private exercise snapshots are available to the account that saved them and are not automatically shared with lecturers. When a student explicitly submits an exercise to a joined class, the submitted title, repair choices, explanation, account name and submission date become available to the class lecturer. Lecturer feedback is available to that student and the approved class lecturer; other students cannot view it. Submitted copies do not change when a private draft is edited. These account-linked records are kept while needed for the account and pilot; contact support to request removal. Optional browser drafts remain in that browser until you clear the exercise or site storage. Avoid saving drafts on shared computers, and do not include real resident information in fictional exercises.

Why we use information and our lawful bases

• Providing the service and managing accounts: where necessary to take steps at your request or perform our contract with you.
• Security, troubleshooting, abuse prevention and service administration: where necessary for our legitimate interests in operating and protecting TennanSeed, after assessing those interests against people’s rights and expectations.
• Responding to support and rights requests: to perform our service obligations, comply with legal duties where applicable, and establish or handle legal claims where necessary.
• Legal and accounting obligations: where processing is necessary to comply with applicable law.
• Basic website statistics: to understand which pages are used and improve the service, on the basis of our legitimate interests in operating and improving TennanSeed, subject to your right to object. You can turn these statistics off using the controls below. Optional marketing or additional tracking would require a separate assessment and consent where required.

The appropriate lawful basis depends on the particular processing and relationship. TennanSeed will document its assessments and update this notice if the service changes.

Jobs and contractor collaboration

Property teams may invite a contractor by email to a specific job. We store the invitation address and sending status, job brief, property address, access instructions, quote versions, approval records, progress notes, uploaded files and account details needed to attribute actions. Invitations expire after seven days and require the invited account to verify its email. Acceptance gives access to that job, not the owner’s rent ledger or general property document library. Job history and job-specific files may be visible to a replacement contractor after acceptance. Do not put unrelated tenant records, title deeds, identity documents, passwords or access codes in the shared job area.

Property teams can revoke contractor access. New file links then become unavailable, but a previously issued link may remain valid for up to 60 seconds; we cannot recall downloaded copies or email. Job images are prepared without embedded location metadata. Removed and unfinished uploads are retained privately and count against storage until a support deletion review. Quotes and completion approvals are operational records; TennanSeed does not independently verify contractor qualifications or insurance and does not collect contractor payments through this feature. Contact support about correction, access or deletion of shared job records.

Workspace data and customer responsibilities

Workspace information is available to people authorised for that workspace. Anyone holding an active public issue-report link may be able to submit an issue to the relevant property team; do not put confidential information in a public report unless you are authorised to do so.

Where a landlord, property manager or other customer decides why and how tenant or property-related personal information is used, that customer will generally be the controller for that information and TennanSeed may act as its processor. The customer remains responsible for having a lawful basis, providing appropriate notices and instructions, and ensuring that uploaded information is appropriate. TennanSeed will put suitable data-processing terms in place where required. TennanSeed may separately act as a controller for its own account, security, billing and support records.

Who we share information with

When enabled, our signup security check uses Cloudflare Turnstile to help detect automated abuse. Cloudflare processes information needed to run that check, and our server validates the resulting challenge token. See Cloudflare’s privacy information. Email confirmation records whether an account controls its email inbox; it is not a check of personal identity or business ownership.

We use Floot-managed infrastructure for hosting and file storage (Amazon Web Services), app database hosting (Neon), and transactional email delivery (Floot’s configured email provider, documented by Floot as Resend). We may disclose information where required by law, to protect rights or security, or as part of a genuine business transfer. We do not sell personal information or use it for third-party advertising. We use Floot’s built-in analytics for basic website traffic statistics, as explained below.

TennanSeed is hosted on Floot-managed infrastructure. Floot documents that app hosting, file storage and content delivery use Amazon Web Services (AWS), and that app databases use Neon. Transactional email is delivered through Floot’s configured email service. Floot documents that the app backend and database are hosted in the United States (AWS us-east-1), while published pages and files may be served through a global content-delivery network. This means personal information may be processed outside the UK. We rely on the platform and its applicable contractual/data-protection terms and safeguards for these services; users can contact us for further information about applicable transfer safeguards. Basic website analytics is processed through Floot’s analytics service. This app does not send end-user workspace data to AI services as part of its current features.

Privacy-conscious traffic analytics

We use Floot’s built-in analytics in memory-only mode to understand page use and referral sources. It sends page paths, referrer information, browser/device information, browser language, an approximate country derived from the browser time zone, and a random session identifier kept only in page memory. The tracker does not include page query strings, URL fragments or IP addresses in its analytics payload. Hosting and security infrastructure separately process technical information needed to deliver and protect the service.

We do not save an analytics identifier in cookies or local storage, use advertising pixels, record sessions or link these statistics to account names, email addresses, rent records or document contents. The in-memory session lasts up to 30 minutes; reloading a page or opening another tab can count as another session. Statistics therefore do not establish the number of distinct people visiting. These limits describe this analytics configuration, not a guarantee that all site technologies are free of privacy obligations.

You can object to traffic analytics using the controls below. Floot remembers only that preference in this browser’s local storage. Your choice applies to this browser and does not disable essential account or security functions. Contact support with any questions about analytics data or retention.

How long we keep information

Email confirmation codes expire after 15 minutes and are stored as keyed hashes, not readable codes. These records are retained briefly after expiry to enforce resend limits, then removed by daily cleanup. Expired signup request counters are also removed by that cleanup.

We apply the following retention criteria: session records and password-reset codes are kept only until their expiry; account and credential records are kept while an account is active and are reviewed after a verified deletion request; workspace property, maintenance, compliance and cost history is kept while needed to operate the workspace, meet customer instructions or satisfy legal obligations; attachments are kept while needed for their linked operational records; support messages are kept while needed to resolve the request and address related disputes or legal claims; security records are kept only for the period needed to investigate abuse and protect accounts; and deletion-request records are kept only as needed to process the request, document the outcome and handle disputes. Where a customer controls workspace records, their lawful instructions and applicable legal duties may affect retention. We will delete or de-identify records when they are no longer needed, subject to lawful retention requirements. Expired-session/reset-code cleanup is configured in source but is not active in production until the updated app is published.

Security

We use technical and organisational measures intended to protect information, including password hashing and session controls. No online service can guarantee absolute security. If a personal data breach occurs, we will assess and respond to it in accordance with applicable legal requirements.

Your data protection rights

Depending on the circumstances and the lawful basis used, you may have the right to request access to, correction of, deletion of or restriction of your personal information, to object to certain processing, and to receive or transfer certain information. Where processing relies on consent, you can withdraw that consent. These rights are not absolute and exceptions may apply.

To make a request, contact support@tennanseed.com or use our account-deletion request page. If your information is held in a landlord’s or property manager’s workspace, contact that organisation as well. You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Children

TennanSeed is a business property-operations service and is not designed for children. Do not create an account or submit children’s personal information unless this is necessary, lawful and appropriately authorised.

Changes and contact

We may update this notice as TennanSeed changes. We will publish the current version and its update date here. For privacy questions, contact support@tennanseed.com.