Privacy Policy

Last updated: May 2026

1. Overview

Umovio is designed to minimize your data footprint. We collect only what is necessary to generate your rental agreement, and we delete everything automatically after 30 days.

2. Data We Collect

When you use Umovio, we collect:

• Wizard inputs: Property details, landlord and tenant information, rent and deposit amounts, lease terms, and other agreement details you provide.
• Email addresses: Landlord and tenant email addresses for agreement delivery and review link distribution.
• Payment data: Processed by Stripe — we store only the Stripe session ID and payment amount, never card details.

3. Data Retention

We enforce strict automatic data deletion:

• Completed agreements: All data (user inputs, generated PDFs, clause snapshots, payment records) is automatically deleted 30 days after creation.
• Abandoned checkouts: Pending agreements from incomplete checkout attempts are deleted after 24 hours.
• No long-term storage: We do not retain any agreement data beyond the 30-day window. Download your PDF before expiry.

4. Third-Party Services

We use the following third-party services to operate Umovio:

• Stripe — Payment processing (P24, BLIK, card). See Stripe's Privacy Policy.
• SendGrid (Twilio) — Transactional email delivery. See Twilio's Privacy Policy.
• Vercel — Application hosting, Blob storage for PDFs, and scheduled jobs. See Vercel's Privacy Policy.
• Neon (Vercel Postgres) — Database hosting. See Neon's Privacy Policy.
• Sentry — Error tracking (collects error data, not personal data). See Sentry's Privacy Policy.

5. Cookies

Umovio uses only essential cookies and localStorage for application functionality (e.g., wizard state persistence, language preference). We do not use analytics cookies or tracking pixels.

6. Your Rights

Under GDPR and Polish data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data (note: automatic deletion occurs after 30 days regardless)
• Object to processing
• Data portability

To exercise these rights, contact us at privacy@umovio.com.

7. Data Security

All data is encrypted in transit (TLS) and at rest. Database connections use SSL. We follow the principle of least privilege for service access.

8. Contact

For privacy inquiries, contact us at privacy@umovio.com.