Privacy notice for team members

Who this notice is for

This notice is for team members: people an owner invites to help run their portfolio as an editor or a viewer. An editor can add and change records. A viewer can only read them.

What we collect about you

We only keep what the app needs to work.

• Your account: your name, email address and password. Passwords are stored as a one-way scramble, so nobody can read them.
• Your work: the changes you make in the portfolio and when you make them.
• Your choices: when you accepted this notice, which version you read and whether you want product news.

Why we use it

We use your details to sign you in, show the owner who changed what, and send the emails the app needs, such as invites, sign-in links, alerts and reminders. We need them to give you access to the portfolio you were invited to.

Product news is only sent if you tick the box for it, and you can stop it at any time.

The portfolio's data

The units, leases, payments and documents belong to the owner's portfolio. The owner decides what is kept and why, and Jubilee stores it for them.

Tenant details, ID documents and the payment track record are there so the owner can run their lets. ID documents confirm who is on a lease. The payment track record lists facts from recorded payments: paid on time, late, short or missed. Use them only for your work on this portfolio and do not copy them elsewhere.

Who can see your details

The portfolio owner and other team members can see your name, email and the changes you make.

We do not sell your data or share it with advertisers.

Where it is stored

Your data is stored by Supabase in Frankfurt, Germany, in the European Union. The app runs on Vercel and emails are sent through Resend. These services may handle your data outside South Africa, under their own security and privacy terms.

How long we keep it

We keep your account while you have access to a portfolio. When the owner removes you, you lose access at once. The record of changes you made stays with the portfolio so its history is complete.

Your rights

Under the Protection of Personal Information Act (POPIA) you can:

• ask what we hold about you and get a copy
• ask us to correct anything that is wrong
• ask us to delete your data
• object to how we use it, and stop product news at any time
• complain to the Information Regulator at inforegulator.org.za

Who to ask

For your own account, ask Jubilee. For the portfolio's records, ask the owner who invited you: they decide what is kept.

Changes to this notice

When this notice changes, we update the version and date at the top of this page.