Management Portal
Privacy notice
Early test version. Last updated 13 October 2026.
Who runs the portal
The portal is run by Woody Lenton, a leaseholder, for leaseholders in England and Wales. Each building's admins approve members and look after their own building, but don't run the portal. If you have any questions about your information, contact woodylen@gmail.com.
What we hold about you
- Your account: your name and email address.
- Your building: which building you belong to, your flat, and anything you give an admin to confirm you live there.
- Your disputes: the disputes you start or join, your place on the board, key points, calendar dates and notes.
- Your documents: letters, invoices and other files you upload, and summaries the AI writes about them.
- Your amounts: figures you enter, such as how much you're disputing.
Who can see it
- Your own letters, invoices and amounts are private to you unless you choose to share them.
- Letters you write are only shared with neighbours as a template, with your personal details taken out.
- Shared things (dispute names, key points, group calendar dates) never contain one person's figures. Where neighbours' amounts are combined, a range is only shown once at least three people have added theirs, and never with names.
- Building admins approve members and manage building documents. They can't see private disputes or your private documents.
Why we use it
To let you and your neighbours organise disputes with your managing agent or landlord, and run your building's affairs together. We don't sell your information or use it for advertising.
Why we're allowed to use it
- To provide the portal you signed up for (in data protection terms, a contract with you): your account, your building, and what you add.
- Legitimate interests: keeping the portal secure, stopping misuse, and fixing problems.
- Your choice: the AI only reads a document when you, or the portal at your request, ask it to.
Sensitive information
Letters and documents can mention things like health, money troubles or family matters. Please only upload what's needed for your building or dispute, and keep documents with that kind of detail private (“Only me”) unless there's a good reason to share them.
Services that help run the portal
- Supabase stores the database and your files (in London, UK).
- Vercel hosts the website.
- Anthropic provides the AI that reads documents you choose to have summarised or checked. Documents are sent to it only when you, or the portal on your behalf, ask the AI to read them.
- Resend sends the portal's emails (sign-up, sign-in links), from Ireland.
Information leaving the UK: Vercel and Anthropic are US companies and Resend sends from Ireland, so some of your information is handled outside the UK. Each of them protects it under the safeguards UK law allows (such as the UK's approved contract terms or the UK–US data bridge). The database and your files themselves are kept in London.
How long we keep it
For as long as you have an account. Documents you move to the bin are deleted for good after 30 days. You can ask for your account and everything you've added to be deleted.
Your rights
Under UK data protection law you can ask to see the information we hold about you, have it corrected or deleted, or object to how it's used. Contact woodylen@gmail.com. If you're not happy with the answer, you can complain to the Information Commissioner's Office (ico.org.uk).
This is an early test
The portal is still being built. If anything looks wrong, or you can see something you think should be private, please tell us straight away.