Privacy policy

Who is responsible

Moradot PSA (Moradot prosta spółka akcyjna), [registered address - to be completed], KRS [KRS - to be completed], NIP [NIP - to be completed] (“Moradot”, “we”) is responsible for the personal data described here. Write to us at [email protected] about anything in this policy.

Two roles

We decide how your account and this website work: your sign-in details, your profile, the emails we send you, and how we answer when you write to us. For this data, we are the controller.

Someone else decides when a building manager, a management company or a landlord uses Moradot to run a building or to let homes. They decide what is recorded about the owners, tenants and residents involved - fees, payments, leases, repairs - and they are the controller of that data. We process it on their behalf, under our data processing terms. If you have questions about that data, you can ask them, or us, and we’ll pass your request on.

What we collect

• Account: your name, email address, phone number and language.
• Signing in: the one-time codes we send you and the technical details needed to keep you signed in.
• Homes and buildings: the buildings and homes you’re part of, and your role in each - owner, co-owner and share, tenant, resident, manager.
• Money: fees, rent, deposits, payments and their proofs, bank account details, and bank statement lines you import.
• Tax numbers, when you or your building manager add them - for example NIF in Portugal, or NIP and PESEL in Poland.
• Documents and photos you upload - invoices and bills, insurance policies, loan agreements, bank statements, proofs of payment, photos of repairs - and the comments and messages you write.
• Connections: the AI assistants you connect and what you allow them to do.
• Preferences: which emails you want to receive.
• Technical data: records of errors and of how the service is running.

To create an account we need your name and an email address or a phone number; without them we can’t provide Moradot. Everything else is up to you, or to the people who run your building.

On this website, and only if you agree, we also collect how you use it - see Cookies and analytics.

Why we use it, and on what basis

• To provide Moradot - your account, your homes, payments, repairs, reminders and every other feature you use. Basis: our contract with you.
• To keep records the law requires, such as accounting and tax records. Basis: legal obligation.
• To keep Moradot secure and working, to prevent abuse, and to fix errors. Basis: our legitimate interest in a safe, reliable service.
• To answer your messages. Basis: our contract with you, or our legitimate interest in helping you.
• To understand how visitors use this website, so we can improve it - only if you agree. Basis: your consent, which you can withdraw at any time.

We don’t sell personal data, and we don’t use it for advertising.

Who helps us

We use a few providers to run Moradot. They process data only on our instructions, under contract:

• Google Cloud and Firebase (Google Ireland Limited) - hosting, database and file storage, in data centres in the European Union; signing in and sending text-message codes; suggesting addresses while you type one (Google Maps).
• Scaleway (France) - sending emails.
• Sentry (Functional Software, Inc., United States) - error reports, set up to leave personal details out as far as possible.
• Mistral AI (France) - reading the documents you ask Moradot to read, such as invoices, utility and meter bills, insurance policies, home loan agreements and PDF bank statements. It receives the whole document, with whatever is printed on it. Only when you use that feature.
• TypeSafe AI - suggesting what each line of an imported bank statement pays, what kind of document you uploaded, which home a bill is for, and whether a payment looks like a loan instalment or an insurance premium. It receives the statement lines (date, amount, description, the other party’s name and account, reference), the records a line might match (names, homes, amounts and due dates), the opening text of an uploaded document, and the address printed on a bill along with the addresses of your homes. Only when you import a statement or a document.
• Google Analytics (Google Ireland Limited) - statistics about how this website is used, only if you agree.

The AI providers only help: what they read or suggest waits for you to check it, and nothing is saved until you do. Our data processing terms set out what each provider receives, and where.

Some data is also shared because you ask for it:

• People in your building see what concerns them - for example, neighbours see your name as “Isabel N.”, without your contact details.
• The AI assistant you connect (for example Claude, ChatGPT or Le Chat) receives the answers to what you ask it. It handles that data under its own privacy policy.
• Public authorities, when you ask Moradot to send something on your behalf - for example, issuing electronic rent receipts with a tax authority - or when the law requires us to.

Outside the European Union

Your data is stored in the European Union. Some providers above may process data outside it - for example, to send text messages or error reports, or to read documents with AI. When they do, the transfer is protected by an EU adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission’s standard contractual clauses. Write to us for a copy of the safeguards.

Cookies and analytics

This website stores a few things in your browser:

• Your language and your cookie choice - so we remember them. These are needed for the site to work as you asked, so we don’t ask for consent.
• Google Analytics cookies (_ga and _ga_…) - only if you click Accept. They tell us which pages are visited, how visitors arrived, and roughly which country and device they use, so we can improve the site. They last up to 13 months.

Until you accept, we don’t load Google Analytics at all. We’ve switched off Google’s advertising features and its signals from Google accounts, and we don’t use the data for advertising. Google may process it outside the European Union, under the EU–US Data Privacy Framework and the standard contractual clauses.

You can change your mind at any time under Cookie settings at the bottom of every page. If you reject analytics, we delete its cookies. The app at app.moradot.com doesn’t use analytics cookies.

How long we keep it

• Your account, for as long as it’s open. When you close it, we delete or anonymise your data within 30 days, except what we must keep by law.
• Financial records, for as long as accounting and tax law requires - usually five years after the end of the year they relate to.
• A building’s records stay with the building for as long as its manager keeps them, so the owners who come after you still have its history.
• Records of the emails we send are deleted after six months.

Your rights

You can ask us to:

• show you the data we hold about you, and give you a copy;
• correct it;
• delete it;
• limit how we use it, or object to how we use it;
• hand it over to you or to another service in a common format.

Where we rely on your consent, such as for analytics, you can withdraw it at any time; that doesn’t affect what we did before.

Write to [email protected]. We answer within one month. You can also complain to a data protection authority.

Keeping it safe

We store sensitive details encrypted, keep your files private, and give each person access only to what concerns them. Read more on our privacy and security page.

Children

Moradot is not meant for children under 16, and we don’t knowingly collect their data.

Changes

If we change this policy, we’ll publish the new version here. If the change matters to you, we’ll tell you by email before it applies.