Privacy Policy
1. What this policy covers
This policy explains how JustToBeSure handles personal information when you browse the site, submit a rental review, upload proof of tenancy, vote anonymously, or report a review.
2. Information we collect
- Review submissions: property address, city/postal code/country, private tenant name, public display name, landlord name as shown on the lease, optional lease dates, ratings, review text, optional Instagram contact, and proof of tenancy.
- Published reviews: public display name, property, ratings, review text and limited tenancy information. Private identity and lease proof are not published.
- Reports: the review reported, reason and explanation. Name and email are optional for ordinary reports but required for a formal illegal-content notice where applicable.
- Anonymous voting: a pseudonymous Supabase user identifier/session used to enforce voting rules. No email, name or phone number is requested for voting.
- Technical/security data: hosting and security providers may process IP address, device/browser information and request logs needed to deliver and protect the service.
3. Why we use it
We use data to verify that a reviewer genuinely rented the property, publish and moderate reviews, prevent fraud and automated abuse, operate anonymous voting, respond to reports and legal requests, secure the service, and establish or defend legal claims where necessary.
For users in the EEA/UK, the legal basis depends on the activity and may include your request/consent to publish a review, our legitimate interests in verification, fraud prevention, moderation and security, and compliance with legal obligations. You may withdraw publication consent; this does not make prior lawful processing unlawful.
4. Verification is limited
“Tenancy verified” means that we verified evidence that the reviewer rented the property. It does not mean that JustToBeSure independently proved every factual statement in the review.
5. Retention
| Data | Normal retention |
|---|---|
| Raw tenancy proof and private verification identity | 90 days after publication; 30 days after rejection; maximum 180 days while a submission remains pending. |
| Legal/dispute hold | May temporarily extend the above period where reasonably necessary for a dispute, fraud investigation, legal claim or legal obligation. |
| Published review | While it remains part of the property history, unless removed, withdrawn, or no longer lawfully needed. |
| Review reports | Normally up to 24 months after resolution, longer only where a legal hold is justified. |
| Anonymous voting identifiers | For as long as reasonably needed to enforce voting integrity and the relevant award cycle, then deleted or aggregated where feasible. |
Deletion jobs run automatically for expired raw tenancy proofs and private verification identifiers. Metadata needed to show that verification occurred may be retained without the raw document.
6. Data minimisation
Please upload only the lease page(s) necessary for verification and redact unrelated bank information, signatures, government ID numbers, phone numbers, personal email addresses and other unnecessary information.
7. Service providers
The service currently relies on providers including Supabase (database, private storage and authentication), Resend (delivery of verification emails sent through Supabase Auth), Cloudflare Turnstile (anti-abuse), GitHub Pages (site hosting), and mapping/geocoding infrastructure such as MapLibre, OpenFreeMap/OpenStreetMap and Photon. These providers may process technical information needed to provide their services. Some processing may occur outside your country; where required, transfers should rely on appropriate legal safeguards.
8. Sale, sharing and advertising
We do not sell personal information. We do not use personal information for cross-context behavioural advertising or targeted advertising. We do not publish raw tenancy documents, private tenant names or landlord contact details.
9. Local storage and cookies
No advertising or behavioural analytics cookies are currently used. Local browser storage is used when you use the anonymous voting feature so the browser can preserve its anonymous session and vote state. Cloudflare Turnstile and infrastructure providers may use strictly necessary security mechanisms.
10. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, obtain a copy of your data, withdraw consent, or complain to a data protection authority. California and other US state laws may also provide rights to know, correct or delete personal information and to opt out of certain sales/sharing; we currently do not sell or share personal information for targeted advertising.
To exercise a right, contact support@justtomakesure.com. We may need limited information to verify that the request relates to you.
11. Security
Tenancy proof is stored in private storage. Direct anonymous database access to verification tables is blocked. Access should be limited to people who need it for verification, moderation, security or legal handling.
12. Age
The review-submission service is intended for adults aged 18 or over. We do not knowingly request personal information from children for review submission or voting.
13. Reports and legal requests
Each published review includes a reporting mechanism. Formal illegal-content notices ask for the information needed to identify and assess the specific content. A report does not automatically mean content is unlawful or will be removed.
Serious reports: reports alleging illegal content, personal-data/privacy issues, or serious threats/harassment require email confirmation by a 6-digit code. Supabase Auth processes the email confirmation. Once confirmed, the reported review may be temporarily hidden while moderation is pending. The reporter email is used for verification and moderation/legal follow-up; it is not shown publicly.
14. Changes
We may update this policy as the service changes. Material changes will be reflected by an updated date and, where required, additional notice.