Plain language. Real mechanisms.
Everything on this page describes how the platform actually behaves — no marketing physics. This is how we protect your money, your data, and your peace of mind.
Your money
Six promises we can point at
Each one maps to a mechanism in the platform — not a policy document.
No payout to an unverified account
Every bank account is validated against the bank's own records — number and registered name — before it can receive a single settlement.
Unclear matches are held for human review (target: 24 hours), never guessed.
Bank rails, not pockets
Money moves from mobile money into regulated banking rails and settles to the owner's verified Ugandan bank account. Nobody at any step “holds” cash.
Confirmed on landing
Settlement confirmations are sent only when a transfer actually completes — they are records of fact, not promises.
Watched channels
Banking channels are monitored continuously. If one degrades, transfers pause and retry rather than fail silently — and our team is alerted immediately.
The SMS holder is the key holder
Receipts and payment records live in private storage, and download links are token-authorized — only the person the link was sent to can open it.
Encrypted, never guessable
All traffic is encrypted over HTTPS, and URLs never expose raw record numbers — identifiers are encoded so accounts and portfolios can't be enumerated.
How we protect you
Private by design, audited by default
Who sees what is decided by relationships — and everything that happens leaves a record.
Relationships decide access
A tenant sees their spaces; an owner sees their properties; a manager's staff see their assigned zones. An observer receives notifications only — no login, no access to funds.
Links resolve per person
The same notification link opens the tenant's view for the tenant and the owner's view for the owner. A stranger gets a 404 — the system doesn't even confirm the thing exists.
Public pages show the minimum
Receipt verification pages never display bank account numbers or internal identifiers — only what a verifier needs to see.
Everything is timestamped
Every payment, settlement slice, reminder and tenant notice is recorded with timestamps — an audit trail by default, not on request.
Every delivery is logged
Every SMS and every email the platform sends is logged, so “I never got it” is a question with an answer.
Receipts are permanent
Receipts are permanent and re-downloadable, and each one is QR-verifiable by anyone, forever.
Questions
Asked and answered, plainly
Only people with a real relationship to it. A tenant sees their own spaces, an owner sees their own properties, and a manager's staff see only their assigned zones and regions. Observers receive notifications only — they have no login and no access to funds. Anyone outside those relationships gets a 404.
Found a security issue?
Tell us directly and we’ll take it seriously. Email us with the subject “Security” and a human on the engineering team will respond.
info@landlod.co.ugSecurity questions before you commit?
Bring your accountant, your lawyer or your most skeptical relative — we'll walk all of you through it.