Privacy notice

Version 2026-10-25. How Manej handles personal information under the Protection of Personal Information Act (POPIA).

1. Who this covers

Property owners whose units Manej manages, tenants and rental applicants, inspectors who enrol with Manej, and anyone who sends a form on this site.

2. Forms on this site

1. Owner enquiries, rental applications, proof of payment, repair requests, inspector enrolments and inspection reports are encrypted in your browser before they are sent.
2. They are sealed to the property manager's inbox key. The server stores the encrypted form and cannot open it.
3. When the property manager takes a form into the workspace, the server's copy is emptied.
4. An email tells the property manager that a form arrived. It names the kind of form only, never its contents.

3. The property manager's workspace

1. Units, tenants, rent accounts, documents and proofs of payment are kept in a workspace encrypted with AES-256 on the property manager's device.
2. The key comes from a passphrase that is never sent to the server. The server stores the encrypted workspace and earlier saved versions of it (so a bad save can be undone), and cannot open them.

4. Scheduled emails

If the property manager switches on scheduled emails (monthly tenant statements, payment reminders, owner statements), the server must be able to read the figures those emails need. Only then:

1. The property manager's device seals a separate copy of those figures to the Manej server's own key, and replaces it each time the workspace is saved.
2. That copy holds: unit details and the account rent is paid into; tenant names, email addresses, phone numbers and lease and rent terms; rent account lines; property bills paid; collection steps taken; owner names, email addresses and phone numbers; and the agency's fee settings and contact details.
3. It does not hold: documents, proofs of payment, ID numbers, rental applications, or inspector details.
4. The server's private key is itself encrypted with a secret kept outside the database. The server opens the copy only in memory, only to build and send the emails that are due.
5. For each email the server keeps a record of the kind of email, the month, the unit and the amount, and whether it was sent. The record holds no names or email addresses.
6. When every scheduled email is switched off, the copy is deleted.

5. Who else handles information

• Railway hosts the Manej server and its database.
• Resend delivers emails sent from Manej (statements, notices, scheduled emails and form alerts). The message passes through the Manej server in memory only.
• DeepSeek receives figures only when the property manager asks for a portfolio analysis: unit numbers and amounts, no names, contact details or bank details.
• Pages load fonts from Google Fonts, which receives your IP address.

6. What is kept on your device

The app keeps its working data in your browser's storage on your device. Manej uses no advertising or tracking cookies.

7. Why, and for how long

1. Information is used only to manage the rental it relates to, to answer the request you made, or to pay and manage inspectors.
2. Records of a tenancy are kept for as long as the law requires records of rent and payments to be kept, and are not used for anything else.
3. To limit abuse of the public forms, the server keeps the IP address of each form sent, in memory, for one hour.

8. Your rights

You may ask what personal information is held about you, ask for it to be corrected or deleted, or object to its use. Email info@steij.co.za. If you are not satisfied with the answer, you may complain to the Information Regulator (inforegulator.org.za).

9. Changes

This notice is updated when what Manej does with information changes. The version in force is shown here.