Security

Effective date: May 18, 2026

1. Our security approach

Landlord Haven is designed to help protect landlord, tenant, property, billing, and payment-related information. We use reasonable technical, organizational, and operational safeguards to reduce security risks.

2. Account protection

User accounts are protected through login credentials. Passwords should be strong, unique, and kept private. Landlord Haven does not require users to share passwords with support staff.

3. Password handling

Passwords should be stored using secure hashing methods, not as plain text. Users are responsible for choosing strong passwords and protecting their devices and email accounts.

4. Secure connections

We aim to serve Landlord Haven over HTTPS so that information sent between users and the platform is encrypted in transit.

5. Payment security

Landlord Haven may process payment references, phone numbers, transaction IDs, payment statuses, and receipt numbers. We do not ask users to enter M-Pesa PINs into Landlord Haven. M-Pesa PIN confirmation happens through the official M-Pesa flow on the user’s phone.

6. Access controls

Access to account data should be limited to authorized users. Landlords and property managers should ensure only trusted people have access to their accounts and devices.

7. Data hosting and infrastructure

Landlord Haven may use third-party infrastructure providers for hosting, databases, email delivery, payment integrations, and related services. We choose providers that support modern security practices.

8. Monitoring and abuse prevention

We may monitor platform activity to detect errors, abuse, suspicious behavior, unauthorized access attempts, payment abuse, spam, and service misuse.

9. User responsibilities

Users should:

• Use strong and unique passwords.
• Keep phones, laptops, and email accounts secure.
• Log out from shared devices.
• Confirm payment details before saving them.
• Only give account access to authorized people.
• Report suspicious activity quickly.

10. Reporting security issues

If you believe you have found a vulnerability, account compromise, suspicious transaction, or security issue, contact us immediately. Please include clear details so we can investigate.

11. Responsible disclosure

We ask security researchers and users to act responsibly. Do not access, alter, delete, download, or expose data that does not belong to you. Do not disrupt the platform or attempt to harm other users.

12. Contact security

Report security concerns to hello@landlordhaven.co.ke or WhatsApp +254 795 545 543.