Legal

Privacy Policy

Effective date: July 11, 2026

Sarta ("we", "us") provides maintenance tracking software for landlords at sarta.online. This policy explains what data we collect, why, and what your choices are. It covers two kinds of people: landlords and their team members who hold Sarta accounts, and tenants who submit maintenance requests through a landlord's public request form.

Data we collect from account holders

• Account details: your name, email address, and a hashed password (we never store passwords in plain text). If you sign in with Google, we receive your name and email address from Google instead.
• Workspace content: the properties, units, tickets, comments, photos, vendor contacts, and cost records you create in your workspace.
• Billing details: payments are processed by Stripe. We store your Stripe customer and subscription identifiers and your plan status — we never see or store your card number.
• Emails we send: we send transactional email (ticket notifications, invitations). We do not sell your address or send third-party marketing.

Data submitted by tenants

When a tenant submits a request through a landlord's public form, we collect the information they provide: name, contact details, a description of the issue, and any photos. This data belongs to the landlord's workspace — the landlord is responsible for it, and we process it on their behalf to provide the service. Tenants who want their data corrected or removed should contact their landlord first; you can also reach us at hello@sarta.online.

We record the IP address of public form submissions solely for rate limiting and abuse prevention.

Cookies and analytics

• Essential cookies: we use session cookies to keep you signed in and a CSRF cookie to protect forms. These are required for the app to work and do not need consent.
• Analytics (optional): we use Google Analytics across the site, including inside the application, to understand aggregate usage. Google Analytics only loads after you accept it in the cookie banner. If you decline, no analytics cookies are set.
• Advertising (optional): we use the Meta (Facebook/Instagram) Pixel to measure the performance of our ad campaigns and understand which visits lead to signups. Like Google Analytics, it only loads after you accept it in the cookie banner.
• Changing your choice: your choice is stored in a sarta_cookie_consent cookie for 12 months. You can change your cookie choice at any time, or delete the cookie in your browser to be asked again.

Where data is stored

• Application data lives in our production database.
• Uploaded photos and attachments are stored privately on Amazon S3. Files are never publicly listable and are served through expiring, signed links.
• We use an error-monitoring service (Sentry) to capture crashes so we can fix them; error reports may include technical request context.

What we never do

• We do not sell personal data. To anyone. Ever.
• We do not use your workspace content for advertising.
• We do not share data with third parties except the processors named above (Stripe, AWS, Google sign-in/analytics, Meta advertising, Sentry, and our email delivery provider), each only to run the service.

Data retention and deletion

Your workspace data is retained while your account is active. If you want your account and workspace permanently deleted, email hello@sarta.online and we will remove it within 30 days, except records we must keep for legal or billing reasons.

Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it by emailing hello@sarta.online. If you are in a jurisdiction with specific privacy rights (such as the EU/EEA, UK, or California), those rights apply to how we handle your data.

Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed, media links expire, and access to production systems is limited. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you.

Children

Sarta accounts require you to be at least 18. The service is not directed at children and we do not knowingly collect their data.

Changes

If we make material changes to this policy, we will update the effective date above and notify account holders by email.

Contact

Questions about privacy: hello@sarta.online.