Privacy policy (Datenschutzerklärung)

Draft. This text was prepared as a starting point and has not been reviewed by legal counsel. Review and adapt it before relying on it.

1. Controller

InnLedger, Schmalkalden, Thüringen, Germany — contact@innledger.com (see the imprint).

2. Server logs

When you visit this website our web server records the requested page, date and time, the transferred data volume, the referring page, the browser type and your IP address. These logs are used to operate and secure the service (Art. 6 (1) f GDPR) and are deleted after 14 days unless they are needed to investigate an incident.

3. Cookies

This site uses only technically necessary cookies: a session cookie (signed, used for the contact form, signup flow and the admin console) and i18n_lang, which remembers your language choice for 30 days. No tracking or advertising cookies are set and no consent banner is required for these cookies (§ 25 (2) TDDDG).

4. Web fonts

The Inter typeface is loaded from Google Fonts (Google Ireland Ltd.). Your browser transmits your IP address to Google when the font is fetched. Legal basis: Art. 6 (1) f GDPR. Recommendation: self-host the font under /public/fonts before launch to avoid this transfer.

5. Contact form

Name, e-mail address and message are used solely to answer your enquiry (Art. 6 (1) b GDPR) and are deleted once the enquiry is settled, unless statutory retention applies.

6. Signup and customer accounts

When you create a workspace we store your name, e-mail address, chosen workspace name and plan in our platform database, and your password as a salted hash. Data you enter into your workspace (properties, guests, bookings, accounting) is processed on your behalf as a processor under a data processing agreement (Art. 28 GDPR); you remain the controller for your guests' data.

7. Payments

Card payments on tenant booking sites are processed by Stripe Payments Europe Ltd. under the tenant's own Stripe account; we never see full card details.

8. E-mail

Transactional e-mails (welcome, booking confirmations, owner statements) are sent from our own mail server. Delivery metadata is logged for 30 days.

9. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to lodge a complaint with a supervisory authority — for Thüringen the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit.

Last updated: 2026-08-30