Control who sees your Leja data

Leja never shares your Trust Graph without your consent. Manage who sees your data, revoke access anytime, and review every query made against your record.

Your data belongs to you. Leja holds your Trust Graph as infrastructure — not as a proprietor. No landlord, agent, bank, or any other party can query your record without your explicit consent. Every time you grant access, you choose what they can see, for how long. Every query made against your record is logged, and you can see the full access history from your Resident dashboard. Any consent you grant can be revoked at any time.

The three levels of access

Not all consent is the same. Leja distinguishes between three types of access, each appropriate for a different situation.

Basic view — public profile link

You generate a shareable link from your Resident dashboard. Anyone who receives the link can see your public profile: your verification tier badge, your Leja Score tier, your payment timeliness rate, and your number of completed tenancies. No personal contact details, no full address history.

This is appropriate for initial landlord inquiries — a way to demonstrate your verification status and payment consistency without granting ongoing access to your record.

No biometric confirmation is required to generate a public link. You can revoke the link at any time, after which it stops working immediately.

Standard sharing — named party access

You grant a specific landlord or agent view access to your full Track 1 history. This goes beyond the public profile link and includes your full Trend timeline (at LGA level), your tenancy duration pattern, and your exit quality record.

Standard sharing requires NIN_VERIFIED tier. You confirm the consent with your device biometric (fingerprint or face recognition on your registered device).

Standard sharing is time-limited by default — you set the duration when you grant it. At the end of the period, access expires automatically. You can also revoke it earlier at any time.

Institutional sharing — banks and insurers

Advanced consent for named institutions — banks, mortgage providers, insurers — that need deeper signals to make a financial decision. This level includes employment stability indicators and income band estimates derived from your Track 1 data.

Institutional sharing requires DOCUMENT_VERIFIED tier and facial recognition with liveness detection. The consent is purpose-specific: you name the institution, the purpose, and the duration. An institution cannot use an institutional sharing consent granted for a mortgage inquiry to query your data for a different purpose.

Revoking consent stops all future queries immediately. It does not erase queries that already happened or the decisions a third party made based on data they received before you revoked. The consent grant screen makes this explicit before you confirm.

Managing your consents

Go to resident.leja.com → Access & Privacy → Active Consents to see every active consent you have granted and every party who has access to your data right now.

From this view you can:

• See the name of every party with active access
• See what data they can access (consent level and scope)
• See when the consent was granted and when it expires
• Revoke any consent immediately

Revocation takes effect instantly in Leja’s systems. The party’s access token for your RIN is invalidated the moment you revoke.

Your access log

Alongside your active consents, you have a full access log at resident.leja.com → Access & Privacy → Access Log. Every query made against your RIN — by any party — is recorded here.

For each entry in the log you can see:

• Who made the query
• When it was made (date and time)
• What consent level the query used
• What derived signals were returned

If anyone attempts to query your data without an active consent, the query fails and you receive a notification within one hour. The failed attempt is also recorded in your access log.

What each party can see based on your relationship

Your relationship	What they can see without consent	What they can see with standard consent	What they can see with advanced consent
Any Leja-verified party	Score tier, timeliness rate	Not applicable	Not applicable
Active landlord or agent	Score tier, timeliness rate, duration pattern	Full Trend timeline (LGA level), exit quality, dispute count	Not applicable
Bank or insurer (institutional)	Nothing	Not applicable	All standard signals plus employment stability, income band estimate

You never need to grant consent in advance. When a landlord asks to view your full history, Resident generates a consent request that you can approve or decline from your dashboard — you are always in control of the moment access is granted.