Privacy Policy
Last updated: July 14, 2026
1. Introduction
Letify MT ("Letify", "we", "our", or "us") operates the platform https://letify.mt — a rental marketplace connecting landlords and tenants directly.
This Privacy Policy explains how we collect, use, and protect your personal data when you use our Platform.
By accessing or using Letify, you agree to this Policy.
2. Information We Collect
We collect only the information necessary to operate the Platform effectively. This may include:
a. Account Information
- Name, email address, and password when you register.
- Optional phone number or profile photo if provided.
b. Identity Verification Data
- To keep the marketplace safe, landlords and tenants can verify their identity through our verification provider Didit (Didit Identity Spain, S.L.). Verification is optional for landlords; tenants need it only to unlock contact details on listings where the landlord requires verified applicants.
- During verification, Didit collects an image of your identity document and a selfie, and performs a facial similarity check. This involves biometric data, which is processed only with your explicit consent, given when you start the verification.
- Letify itself does not store your identity document or selfie. We store only the verification outcome (approved, declined, or in review), the date of the decision, and a session reference used for support and audit purposes.
- Once a final verification decision is reached, we instruct Didit to permanently delete the verification session, including the document images, the selfie, and all biometric data. Verification sessions that are never completed are deleted automatically within 30 days.
- For details on how Didit handles your data, see the privacy policy at didit.me.
c. Listing Information
- Property details, photos, videos, and address (approximate or full, depending on what you choose to share).
- Contact details (name, phone number, email), shared only with tenants whose application you accept (see section 6).
d. Application Information
- When you apply to a listing as a tenant, we collect your message to the owner, your occupation, and your phone number, plus optionally your monthly income and the number of people moving in.
- The landlord sees your message and profile when you apply. Your phone number and email are shared only if the landlord accepts your application (see section 6).
e. Payment Information
- Payments are securely processed through Stripe.
- We do not store or have access to your full credit card details.
f. Usage Data
- Interaction events on listings (for example when a listing is viewed or when contact details are revealed), together with your IP address and browser type. We use this to show landlords aggregate listing statistics, to operate the Application Guarantee, and for security monitoring and fraud prevention.
- With your consent, analytics and advertising data as described in section 4.
3. How We Use Your Information
We use your personal data to:
- Create and manage your account.
- Verify your identity to keep the marketplace safe.
- Publish and manage your property listings.
- Facilitate communication between landlords and tenants, including exchanging contact details when a landlord accepts a tenant's application (see section 6).
- Process payments securely via Stripe.
- Detect and prevent fraud or misuse.
- Improve our platform and user experience.
- Measure the effectiveness of our marketing campaigns, only with your consent.
- Comply with legal obligations.
Our lawful bases under the GDPR: most of the processing above is necessary to perform our contract with you - providing the marketplace you signed up for (Article 6(1)(b)). General identity verification, fraud prevention, and platform security rest on our legitimate interest in keeping the marketplace safe (Article 6(1)(f)). The biometric part of identity verification (the facial similarity check described in section 2b) is processed only with your explicit consent (Article 9(2)(a)), given when you start a verification, and you can withdraw it at any time by contacting us. Analytics and advertising cookies are used only with your consent (Article 6(1)(a)), and some processing (for example payment records) is required by law (Article 6(1)(c)).
We do not sell or rent your data to third parties.
4. Cookies, Analytics & Advertising
We use two kinds of cookies and similar technologies:
- Essential cookies — required for the Platform to work, such as authentication (provided by Clerk) and remembering your cookie preferences. These do not require consent.
- Analytics and advertising cookies — used only if you accept them in our cookie banner. These include:
- Google Ads conversion tracking (Google Ireland Ltd), to measure our advertising campaigns.
- Meta Pixel (Meta Platforms Ireland Ltd), to measure our advertising on Facebook and Instagram.
- OpenReplay, to replay sessions of the listing creation and publishing flow so we can find and fix usability problems.
When you first visit Letify, a banner asks for your consent before analytics and advertising cookies are used. You can change your mind at any time via the "Cookie settings" link in the footer, or by clearing cookies in your browser settings.
5. Data Storage & Security
- Your personal data is primarily stored on secure servers located in the EU.
- We implement industry-standard security measures to protect against unauthorized access, alteration, or disclosure of data.
- However, no method of online transmission or storage is 100% secure, so we cannot guarantee absolute security.
6. Data Sharing & Service Providers
a. Between Landlords and Tenants
Letify's core service is connecting landlords and tenants directly, and that requires sharing some of your data with the other side:
- When a tenant applies, the landlord sees the tenant's name, profile photo, verification status, application message, occupation, and any optional details the tenant chose to provide (monthly income, number of occupants). The tenant's phone number and email are not shared at this point.
- When the landlord accepts an application, contact details are exchanged both ways: the landlord receives the tenant's phone number and email, and the tenant receives the contact details on the listing. Both sides are told this in the interface before they act.
- We share these details because it is necessary to perform our contract with each of you: delivering exactly the introduction you asked for by applying, or by listing and accepting (Article 6(1)(b) GDPR).
- If you withdraw your application (or it is declined) before acceptance, your contact details are never shared. If you withdraw after acceptance, we stop providing your details through the Platform, but information already exchanged cannot be recalled.
- Once contact details are exchanged, each party is responsible for how they use them. Using them for anything other than the rental conversation (for example marketing) violates our Terms of Service.
b. Service Providers
We only share information with service providers we need to operate the Platform:
- Clerk — authentication and account management.
- Stripe — payment processing.
- Didit — identity verification (see section 2b).
- Amazon Web Services — storage of listing photos and videos, and notifications.
- Resend — transactional email (e.g. listing notifications).
- Neon — database hosting (EU region).
- Render and Vercel — application hosting.
- Sanity — content management for our blog.
- Google, Meta, and OpenReplay — advertising and analytics, only with your consent (see section 4).
We also disclose information when required by law or a valid legal request. All service providers are bound by data processing agreements and confidentiality obligations.
7. International Data Transfers
We keep your data in the EU wherever possible. Some of our service providers (for example Google, Meta, and US-based infrastructure providers) may process limited data outside the European Economic Area. Where that happens, transfers are protected by safeguards recognised under the GDPR, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
8. Data Retention
We keep your personal data only for as long as necessary:
- Account data — while your account remains active.
- Identity verification outcome — while your account remains active.
- Payment and legal data — as required by Maltese and EU regulations.
- Analytics data — anonymized and stored for limited periods.
You can request deletion of your data at any time (see section 10).
9. Your Rights (GDPR)
As a user located in the EU, you have the right to:
- Access the data we hold about you.
- Request correction of inaccurate data.
- Request deletion ("right to be forgotten").
- Withdraw consent at any time, including consent to analytics and advertising cookies (via "Cookie settings" in the footer) and consent to identity verification.
- Request a copy of your data (data portability).
- Lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta, or with the supervisory authority of the EU country where you live or work.
To exercise any of these rights, contact us at hello@letify.mt.
10. Data Deletion Requests
If you wish to close your account or delete your data, email hello@letify.mt with the subject "Data Deletion Request".
We will verify your identity and remove your information within 30 days, unless retention is required by law.
11. Changes to This Policy
- We may update this Privacy Policy from time to time.
- When changes occur, we will update the "Last updated" date above.
- Significant changes may also be communicated via email or notice on our website.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Letify MT
Email: hello@letify.mt
Website: https://letify.mt