Privacy policy
This is a translation for your information. The German version is legally binding. Deutsch
Last updated: November 2026
1. Controller
Nick Linz – Openhouse, Bechtoldstr. 9, 63739 Aschaffenburg
Email: support@openhouse-app.com
2. Overview
We process personal data only to the extent necessary to provide this website and our software “Openhouse”. The legal bases are in particular Art. 6 (1) (b) GDPR (contract and pre-contractual measures), (c) (legal obligations, e.g. retention of invoices) and (f) (legitimate interests, e.g. secure operation).
3. Hosting and server logs
The website and the application are operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland. When you access them, technically necessary data is processed (IP address, date and time, requested address, browser identifier). This data is used to deliver the pages and to defend against attacks (Art. 6 (1) (f) GDPR) and is deleted after 14 days at the latest. A data processing agreement is in place with the host.
4. Cookies
We only use technically necessary cookies: a session cookie for signing in, a cookie that protects forms against misuse (CSRF protection), a short-lived cookie for notifications and cookies that store your chosen language and currency. We do not use analytics, tracking or advertising cookies. No consent is required for this under Section 25 (2) TDDDG.
5. Fonts
We use the system fonts of your device or the Inter font, which we serve from our own server. We do not load fonts from third-party servers; there is no connection to Google or other providers.
6. Registration and customer account
To use Openhouse we need your name, your email address and a password. We only store the password as a cryptographic hash. For security reasons we log the IP address and browser identifier of the session when you sign in. The legal basis is Art. 6 (1) (b) GDPR. The data is deleted when you delete your account, unless statutory retention obligations apply.
7. Data of your tenants and owners (data processing on your behalf)
When you use Openhouse, we process data of third parties on your behalf, in particular of tenants (e.g. name, contact details, IBAN, payments, contract data) and the bank transactions you import. You as the landlord or property manager are responsible for this data; we act as a processor pursuant to Art. 28 GDPR. We provide a data processing agreement on request.
8. Payment processing
Subscriptions are processed via Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland). Name, email address, billing address and payment details are transmitted to Stripe. We do not receive payment details such as card numbers ourselves. Stripe may also transfer data to the USA; Stripe is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6 (1) (b) GDPR. More information: https://stripe.com/privacy
If you take out the subscription in the iPhone app, payment is processed by Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). We do not receive your payment details. Apple sends us a signed confirmation containing the product, term, a transaction number and a random identifier of your Openhouse account so that we can assign the subscription to your account, and informs us about renewals, cancellations and refunds. The legal basis is Art. 6 (1) (b) GDPR. Apple’s privacy policy applies to processing by Apple: https://www.apple.com/legal/privacy/
9. Sending emails
We send system emails (e.g. confirming your email address, resetting your password) and letters to tenants that you trigger via an email service provider (Resend, Inc., USA), with whom a data processing agreement including standard contractual clauses is in place.
9a. Bank connection
If you connect a bank account, we retrieve the transactions and the balance of the accounts you have approved via Enable Banking Oy (Finland), an account information service licensed under the Payment Services Directive (PSD2). You sign in exclusively on your bank’s website; we do not receive your credentials. We only store incoming payments (date, amount, payer, IBAN, reference) in order to assign them to leases, as well as the account balance. Access is read-only and can be disconnected at any time under “Bank accounts”; it ends after 180 days at the latest. The legal basis is Art. 6 (1) (b) GDPR.
9b. iPhone app and notifications
If you allow notifications in the iPhone app, we store a device token issued by Apple and send notices (e.g. “Rent received”) via the Apple Push Notification service (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland). The notification contains a short text and a link to the relevant page. The token is deleted when you sign out of the app. Face ID is checked exclusively on your device; we do not receive any biometric data. The legal basis is Art. 6 (1) (b) GDPR.
10. Retention period
We store data for as long as your account exists. After cancellation, your data is initially kept so that you can export it; on request we delete it immediately. We retain invoice data in accordance with statutory obligations (up to 10 years). Daily backups are overwritten after 14 days.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can also lodge a complaint with a data protection supervisory authority. Please contact support@openhouse-app.com with any request.
12. Data security
All connections are encrypted using TLS. Access within the application is restricted to the respective account and the roles assigned.