Legal

Privacy Policy

Last updated on 28 October 2026.

1. Who we are

Kelid is offered by Macocian Software, Place Terdelt 5, 1030 Schaerbeek, Belgium (CBE 1043.980.217). Any question about this policy or about personal data held by Kelid can be sent to [email protected] or to that address.

The terms “personal data” and “processing” are to be understood as defined in Article 4 of Regulation (EU) 2016/679 (the “GDPR”). “Client” and “Terms” have the meaning given in the Terms of Service.

Kelid holds two kinds of personal data, in two different roles. For the data about the Client and their users (who they are, their login, their Subscription), Macocian Software is the controller, and articles 2 to 4 apply. For the personal data the Client stores in Kelid about other people, their tenants above all, the Client is the controller and Macocian Software their processor, and article 5 applies.

2. What we collect about the Client

• The account: each user’s first and last name, email address, country and password, which is stored only as a salted hash, never as such; the account’s settings, such as its currency.
• Billing: the Subscription’s plan, its period and the identifiers Stripe gives the customer and the Subscription. Card details are entered on Stripe’s page and never reach Kelid.
• Messages: what the Client writes to support, and a record of the service emails sent to them (address confirmation, password and address changes, warnings before deletion).
• Technical data: the IP address and the requests made, which the servers keep in their logs for security and to diagnose faults.

Neither the Website nor the application tracks its visitors: there is no analytics, advertising or tracking cookie. The application keeps the login session, the chosen theme and the chosen language in the browser’s storage, which it needs in order to work.

3. Why, and on what legal basis

• Performing the contract (Article 6(1)(b) GDPR): creating and running the account, logging in, providing the service, sending the emails the service depends on, and answering support requests.
• Legal obligations (Article 6(1)(c)): issuing invoices and keeping them and the accounting records for as long as Belgian law requires, and answering requests from the competent authorities.
• Legitimate interest (Article 6(1)(f)): keeping the service secure and preventing abuse (server logs, limits on repeated requests, a record of each deletion so that restoring a backup cannot bring deleted data back), and naming the Client among our clients as article 10 of the Terms allows, which the Client may object to at any time.

We do not sell personal data, use it for advertising, or send marketing emails.

4. How long we keep it

An account and everything in it, the Client’s own data and the data they stored about others, are kept for as long as the Subscription or trial runs, and for one (1) year after access has ended, so that the Client can come back to it by subscribing. The account’s users are warned by email before it is deleted at the end of that year. An account whose email address was never confirmed is deleted thirty (30) days after it was created.

The Client may delete it all sooner, at any time, by closing the account from the settings page, which takes effect at once. A user of a shared account may likewise leave it, which deletes only that user.

Some things outlive the account: invoices and the payment records Stripe holds, for as long as accounting and tax law require; a record of each deletion, which holds only identifiers and a date, never the data deleted; and the backups, from which deleted data disappears as they are replaced, and which are never restored without the deletions recorded since being applied again.

5. Data the Client stores about others

The Client may store personal data about other people in Kelid: their tenants’ names, email addresses and phone numbers, leases, payments, documents and the reminders sent to them. For this data, the Client is the controller and Macocian Software processes it on their behalf, under Article 28 GDPR. By accepting the Terms, the Client instructs Macocian Software to process it as described here, and Macocian Software undertakes to:

• process it only to provide the service and on the Client’s documented instructions, which are what the Client does in the application, unless the law requires otherwise, in which case it will inform the Client first where the law allows;
• keep it confidential, make no copy of it other than what running the service technically requires (backups included), and ensure that everyone authorised to access it is bound to confidentiality;
• protect it with the measures described in article 8;
• engage only the sub-processors listed in article 6, and inform the Client by email at least thirty (30) days before adding or replacing one, so that the Client can object and, failing agreement, close their account;
• help the Client answer the people the data concerns: the application lets the Client correct a tenant’s details, forget a tenant (erasing their name and contact details while keeping the Client’s lease and payment records) and download a copy of the account’s data, and any request Macocian Software receives directly is passed on to the Client;
• inform the Client without undue delay after becoming aware of a personal data breach affecting it, and help the Client meet their own obligations in that respect and under Articles 32 to 36 GDPR;
• delete it at the end of the service as article 4 describes, the Client being able to download a copy beforehand;
• make available to the Client the information needed to show that these obligations are met.

The Client remains responsible for having a legal basis for the data they store and for informing the people it concerns. Kelid sends email to tenants only when the Client sets up a reminder to them.

6. Sub-processors

Kelid runs on servers Macocian Software operates itself, in Belgium, where its database is stored. No hosting provider has access to it.

Macocian Software uses the following providers, each bound by a data processing agreement, and shares with each only what its task requires:

• Stripe Payments Europe, Ltd. (Ireland): payments and invoices. It receives the name and email address of the user who subscribes, and the payment details they enter on its page.
• Apple Distribution International Ltd. (Ireland), through iCloud Mail: sending Kelid’s emails, the reminders to tenants included. It receives each message and the address it goes to.
• Cloudflare, Inc. (United States): the network every connection to Kelid passes through, the Website, the application and the servers behind it alike. It sees each visitor’s IP address and, since it decrypts the traffic to protect and forward it, the data exchanged with Kelid, including the data the Client stores in it. Through Cloudflare R2, it also stores the backups, which are encrypted before they leave Macocian Software’s servers, and Cloudflare holds no key to read them.

Where a provider is established outside the European Economic Area, or may access data from outside it, the transfer is covered by an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework, or by its standard contractual clauses.

7. Other disclosures

Besides the sub-processors above, personal data is disclosed only:

• within Macocian Software, to the people handling the Client’s support requests;
• to the competent governmental and public authorities, to comply with legal or regulatory obligations or requests;
• to other third parties where necessary (a) under applicable law, (b) to comply with legal proceedings, (c) to enforce the Terms, (d) to protect the rights, interests, security or property of Macocian Software, the Client or others, or (e) to allow the Client to pursue available remedies or to limit the damage Macocian Software may suffer.

In any other situation, Macocian Software will ask for the Client’s authorisation before sharing their data, and it ensures that everyone it shares data with protects it at least as well as this policy does.

8. Security

Kelid is reached only over encrypted connections (HTTPS), and its servers are protected by a firewall. Passwords are stored only as salted hashes. The data in each account (users, tenants, rents, leases and so on) is backed up every night to separate storage, encrypted before it leaves Kelid’s servers. Everyone working for Macocian Software is bound to keep Client information confidential.

Macocian Software keeps its security up to date, but no mechanism is perfectly secure, and some risk always remains in sending personal information over the internet.

9. Your rights

Under the GDPR, the Client and every user have the right to access the personal data concerning them, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Most of this can be done directly in the application: the settings page corrects a name or address, downloads a copy of the account’s data, and closes the account. Anything else can be asked at [email protected], and will be answered within one month.

A tenant or anyone else whose data a Client stored in Kelid should address their request to that Client, who is the controller of it. A request that reaches Macocian Software is passed on to them.

Anyone may also contact the Belgian Data Protection Authority with a question about their rights or a complaint about how their personal data is processed: Rue de la Presse 35, 1000 Brussels, [email protected].

10. Changes to this policy

This policy may change as the service does. A significant change is announced to the Client by email fifteen (15) days before it takes effect, as for the Terms.