Security & privacy

Plain language. Real mechanisms.

Everything on this page describes how the platform actually behaves — no marketing physics. This is how we protect your money, your data, and your peace of mind.

Your money

Six promises we can point at

Each one maps to a mechanism in the platform — not a policy document.

No payout to an unverified account

Every bank account is validated against the bank's own records — number and registered name — before it can receive a single settlement.

Unclear matches are held for human review (target: 24 hours), never guessed.

Bank rails, not pockets

Money moves from mobile money into regulated banking rails and settles to the owner's verified Ugandan bank account. Nobody at any step “holds” cash.

Confirmed on landing

Settlement confirmations are sent only when a transfer actually completes — they are records of fact, not promises.

Watched channels

Banking channels are monitored continuously. If one degrades, transfers pause and retry rather than fail silently — and our team is alerted immediately.

The SMS holder is the key holder

Receipts and payment records live in private storage, and download links are token-authorized — only the person the link was sent to can open it.

Encrypted, never guessable

All traffic is encrypted over HTTPS, and URLs never expose raw record numbers — identifiers are encoded so accounts and portfolios can't be enumerated.

How we protect you

Private by design, audited by default

Who sees what is decided by relationships — and everything that happens leaves a record.

Relationships decide access

A tenant sees their spaces; an owner sees their properties; a manager's staff see their assigned zones. An observer receives notifications only — no login, no access to funds.

Links resolve per person

The same notification link opens the tenant's view for the tenant and the owner's view for the owner. A stranger gets a 404 — the system doesn't even confirm the thing exists.

Public pages show the minimum

Receipt verification pages never display bank account numbers or internal identifiers — only what a verifier needs to see.

Everything is timestamped

Every payment, settlement slice, reminder and tenant notice is recorded with timestamps — an audit trail by default, not on request.

Every delivery is logged

Every SMS and every email the platform sends is logged, so “I never got it” is a question with an answer.

Receipts are permanent

Receipts are permanent and re-downloadable, and each one is QR-verifiable by anyone, forever.

Questions

Asked and answered, plainly

Only people with a real relationship to it. A tenant sees their own spaces, an owner sees their own properties, and a manager's staff see only their assigned zones and regions. Observers receive notifications only — they have no login and no access to funds. Anyone outside those relationships gets a 404.

Found a security issue?

Tell us directly and we’ll take it seriously. Email us with the subject “Security” and a human on the engineering team will respond.

info@landlod.co.ug

Security questions before you commit?

Bring your accountant, your lawyer or your most skeptical relative — we'll walk all of you through it.