Privacy Policy

Happy Home is rental and property management software for landlords in Cambodia. It is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS, Cambodia], Cambodia ([COMPANY REGISTRATION NUMBER, if registered]). In this policy, “we” and “us” mean that company, and “you” means the landlord or property manager using the software.

If you have a question about anything here, email privacy@happyhome.example. A real person reads it.

This policy covers the Happy Home application and the information that passes through it. It explains what we collect, why, where it lives, and what you can ask us to do with it.

It does not cover what you do with your tenants’ information outside Happy Home, or any other service you connect to. If you export a spreadsheet of tenants and email it to someone, that is your responsibility, not ours.

This is the most important thing to understand about privacy in Happy Home, so it comes before the detail.

• You, the landlord. You signed up, you agreed to these documents, and you decide what goes into the system.
• Your tenants. They did not sign up. They have never seen this software. Their names and phone numbers are in it because you put them there.

Your account

• Your name, email address, and role (owner, staff, or guest).
• Your password, stored only as a bcrypt hash. We cannot read it, and neither can anyone with access to the database.
• Failed login attempts, recorded against your email address so we can slow down someone guessing your password. These are deleted on a rolling basis.

Property and tenant information that you enter

• Tenant names, phone numbers, and Telegram chat IDs once a tenant links their account.
• Move-in and move-out dates, deposits, and contract details.
• Rooms, floors, branches, and rent amounts.
• Water and electricity meter readings.
• Invoices and bills, in US dollars and Khmer riel, including late fees and carried-over balances.
• Payment records — what was paid, when, and how much remains outstanding.
• Expenses, maintenance requests, and notices you write.

Whether any of this is sensitive depends entirely on what you type into it. A free-text note on a tenant record can hold anything, so please keep out anything you would not want stored — health details, for example, or identity document numbers you do not actually need.

Files you upload

• Photographs and video attached to reminders and notices.
• Receipts and documents you attach to records.
• Screenshots of KHQR payments — both the ones your tenants send you, and the one you send us when you pay for your Happy Home subscription. Section 7 covers the latter.

Billing information for your subscription

• Which plan you are on, your billing cycle, and the price recorded against it.
• Your payment submissions: the amount, the reference number, and the screenshot.
• A contact name and email address for billing.

Information recorded automatically

• An audit log of significant actions — who did what, to which record, and when. This exists so that a disagreement about who changed a bill has an answer.
• Ordinary server logs from our hosting provider, including IP addresses and error details. Our logging deliberately strips out passwords, tokens, and connection strings before writing anything down.
• Scrambled fingerprints of your workspace's structure — room numbers, branch names and tenant phone numbers, each turned into a one-way code that cannot be turned back into the original. We use them for one thing only: recognising when a workspace is a copy of an earlier one, so that the four-month free trial cannot be taken repeatedly. We never store a copy of your exported data for this, and the codes are never shown to anyone.

We do not use advertising cookies, analytics trackers, or third-party marketing pixels. The only cookie we set is the one that keeps you logged in.

Happy Home runs on two cloud services, both configured to keep data in Singapore, which is the closest region to Cambodia that either provider offers:

• Vercel runs the application itself and serves the pages to your browser.
• Supabase holds the database (tenants, invoices, payments) and the file storage (photographs, receipts, payment screenshots).

This means your information leaves Cambodia and is stored on servers in Singapore. If that is a problem for you, please raise it before you start entering tenant data rather than after.

Connections to the application are encrypted in transit (HTTPS). Backups we take of the database are encrypted before they are stored.

We do not sell your information and we do not share it for anyone else’s marketing. It is seen by these parties only:

• You and the users you invite. What each one can see depends on the role you give them.
• Our operators. A small number of administrators can access the system to run it, support you, and check payments. Their actions are recorded in the audit log.
• The service providers below, each of which handles a specific part of running the software.

We may also disclose information if the law requires it, or to establish or defend a legal claim. If we are legally able to tell you first, we will.

When you pay for your Happy Home subscription, you pay by KHQR in your banking app and then upload a screenshot as proof. There is no automatic bank feed in Cambodia that we can use, so a person on our side looks at that screenshot and compares it against the amount and reference number before approving your subscription.

That has three consequences you should know about:

• An operator sees your screenshot. It may show your name, your bank, and a partial account number, depending on what your banking app displays.
• We keep the screenshot after approval. It is the evidence that a payment was made and accepted, so we retain it for as long as we keep your billing records. If a payment is later disputed, that file is the answer.
• If we reject a payment, the screenshot is kept, not deleted. Rejection records a reason and nothing else. This is deliberate — it means a mistaken rejection can be reversed and the evidence still exists.

Before you take the screenshot, feel free to crop or hide anything that is not needed to verify the payment. All we need is the amount, the date, and the reference.

These are the protections that are actually in place today:

• Every page and every data request requires you to be logged in.
• Passwords are stored as bcrypt hashes, never as readable text.
• Repeated failed logins are throttled, so an attacker cannot sit and guess passwords.
• What each user can do is limited by their role, and this is enforced on the server, not just hidden in the interface.
• Uploads are restricted to a fixed list of safe file types.
• Uploaded files are stored at long random addresses that cannot be guessed or listed.
• Logs are automatically scrubbed of passwords, access tokens, and database connection strings.
• Database backups are encrypted before storage.
• Significant actions are written to an audit log.

No system is perfectly secure. If you believe your account has been accessed by someone else, email support@happyhome.example straight away and change your password.

• We do not sell your information, or your tenants’, to anyone.
• We do not share it with advertisers or data brokers.
• We do not use your tenant records to market anything to your tenants.
• We do not handle, store, or ever see card or bank account credentials.
• We do not read your data for our own purposes. Our operators access it to run the service, support you, and verify payments — not to browse it.
• We do not use device fingerprinting, behavioural tracking, or any outside service to check who you are. The free-trial check described in section 4 looks only at information you already gave us inside Happy Home.

• While your account is open: we keep your records until you delete them or ask us to. Tenant records stay in place after a tenant moves out, so that your history and accounts remain complete — if you would rather they did not, delete them or ask us.
• Billing records and payment screenshots: kept for as long as we may need them to answer a question about a payment, and for any period Cambodian tax or accounting rules require.
• Audit logs: kept for the life of the account, because their whole purpose is to answer questions about the past.
• Free-trial check records: the scrambled fingerprints described in section 4, and any note of a trial that was held for review, are kept for the life of the account and deleted with it.
• Backups: encrypted backups are kept on a rolling schedule of roughly eight weekly and six monthly copies. This means that after you delete something, copies can persist in backups for up to about six months before ageing out. We do not restore backups to recover deleted data unless we are fixing a genuine incident.
• If you close your account: tell us and we will delete your data within 30 days, apart from what we must keep for tax, accounting, or an unresolved dispute, and apart from backups, which age out as above.

You can ask us to:

• Show you what we hold about you.
• Export your data. The app has a built-in export, so for most requests you do not need to wait for us at all.
• Correct anything inaccurate — most of it you can edit yourself.
• Delete your account and its data, subject to the retention above.
• Answer a question about anything in this policy.

Email privacy@happyhome.example from the address on your account. We will reply within 30 days. There is no charge unless a request is repetitive or unreasonable, and we will tell you before charging anything.

Cambodia’s data protection law is still developing. We are describing what we will actually do for you here, rather than claiming to meet a particular foreign regime.

Your tenants’ information is in this system because you put it there, and that carries obligations that are yours rather than ours:

• Have a proper reason to hold it. Normally that is your rental agreement and the ordinary business of collecting rent.
• Tell your tenants. They should know you keep their details in a software system, that it is hosted in Singapore, and how to reach you about it. We cannot tell them, because we have no relationship with them — you do.
• Collect only what you need. A phone number to send a rent reminder is reasonable. A photograph of an identity document usually is not, unless you have a specific reason.
• Handle their requests. If a tenant asks you what you hold about them, or asks you to delete it, that request is yours to answer. Ask us and we will help.
• Keep your account secure. Use a strong, unique password and do not share logins between staff — the audit log is only meaningful if each person has their own account.

If you are a tenant and your details are in Happy Home, your landlord put them there and decides what happens to them. Please contact your landlord first — they can see, correct, and delete your records themselves, which is usually the fastest route.

If you cannot reach them, or you believe your information is being handled improperly, email privacy@happyhome.example and we will help where we can. We will need to confirm who you are and which property you rent before discussing any record.

Rent reminders over Telegram are sent only after you have linked your Telegram account and shared your phone number with the bot. If you no longer want them, tell your landlord or block the bot, and the messages stop.

Happy Home is business software for landlords and is not intended for anyone under 18. We do not knowingly create accounts for children. Tenant records may name a family, including children, if a landlord enters them — please do not enter more about a child than your rental agreement genuinely requires.

If we change this policy we will update the version number and the “last updated” date at the top. For a change that materially affects your rights, we will tell account holders by email or a notice in the app before it takes effect. Continuing to use Happy Home after a change means you accept the updated policy.

Privacy questions, data requests, and complaints: privacy@happyhome.example

Help with using Happy Home: support@happyhome.example

Legal notices: legal@happyhome.example

Postal address: [LEGAL ENTITY NAME], [REGISTERED ADDRESS, Cambodia], Cambodia.

See also the Terms of Service, which cover plans, payment, and the rules for using Happy Home.