Landlord Bookkeeping Without Names in URLs

PropertyCare is an operations desk. It is not Sage, not Xero, not a bank feed, and not a place to encode a tenant’s surname in a public link so you can find an invoice later. ManjeProp’s clean books start with boring references: ticket numbers, booking refs, invoice numbers, property and unit names.

This is for owners and staff who want a later accountant conversation that does not begin with a POPIA incident.

What the desk should hold

Invoices with lines, tax as you configured it, and Paid only when the bank shows the money
Quotes that were printed and accepted outside the software
Repair costs as operations figures, with contractor documents
Materials issued
Utility readings
Tickets and repair logs

The owner CSV can include personal data. Treat it as confidential. Encrypt it. Do not mail it to a personal inbox “so I can work on Sunday.”

What should never appear in a URL

A tenant name. A unit number used as a tracking parameter. A phone. A meter serial. An identity number. A filename like invoice-thabo-id9001.pdf sitting on a web-reachable folder.

Marketing links, if Build Resources is ever on, sit on care notes with a disclosure. They do not sit on a tenant record. UTM tags do not get to carry a person.

The public site has listings, an enquiry form and a fault form. It does not need /manage/ objects in a shareable caption.

Names versus references

Inside the desk, of course you will see a client name on a booking. That is a private screen. When you export, when you name a file, when you write a WhatsApp to a contractor group, switch to the reference: INV-1044, TCK-889, 16 Saunders Room 2.

Contractors need an address and a unit, not a copy of a smart ID. If an estate gate wants ID, that is a visit rule, not a scan stored on the invoice.

Rent is not a repair, a rebate is not rent

Mark invoices paid from the bank reference, in the controlled file. Do not mark Paid because someone promised an EFT. Do not mark Paid because an affiliate dashboard showed a click.

A hardware rebate, if you ever have a real trade account, lives in a private register. It is not a Desk invoice and it does not change which locksmith you phone at 23:00.

Repair costs help you see what a house consumes. They are not automatically deducted from a deposit. Deposits need their own evidence pack.

Monthly habit

Sample five invoices against the bank. Scan notes for identity data that drifted in. Scan listings so an “available” room is not occupied. Do not mix Facebook reach with occupied units. Do not treat a click count as rent.

If you later connect an accounting tool, you will be exporting clean references and amounts, not a folder of ID photos named after students.

Staff access

Owner banking changes are two-person and verified on a known number. Staff who only work tickets should not be the people exporting the owner CSV. When someone leaves, remove the login and the mailbox grant. Keep the business record. Delete the unofficial spreadsheet on their laptop if you can.

Do not promote every staff user to owner so the Sunday export is easier.

Tenants and parents

You will receive ordinary invoices and ordinary replies. You should not receive a link that contains your identity number. If you do, tell us on +27 60 313 6961. If something in the house is broken, you still use Report a fault — with photos of the fitting, not of your documents.

Room questions belong on properties.

If a contractor asks for “the tenant’s ID in the subject line,” refuse and send the reference instead. A subject line travels into inboxes you do not control.

Bookkeeping that respects people is mostly naming files like an adult. References travel. Identity numbers should not.

The honest path to a later Sage or Xero mention is this habit, not a hidden field on a ticket.