Privacy Policy

Rentiro (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Rentiro property management platform.

Please read this policy carefully. If you do not agree with it, please do not access the Service.

2.1 Personal Information

Information you provide directly:

• Name, email address, and phone number
• Account credentials (hashed — we never store plain-text passwords)
• Building, floor, and flat details
• Role and access level
• Communication preferences

2.2 Usage Information

Automatically collected when you use the Service:

• IP address, browser type, and device information
• Pages visited and features used
• Session timing and frequency data
• Performance and error diagnostic data

2.3 Financial Data (resident-level)

As a property management platform, we process invoice and payment records on behalf of building owners. This includes:

• Invoice amounts, due dates, and reasons
• Payment confirmations and proof uploads
• Outstanding balance information
• Transaction audit logs

2.4 Subscription Billing Data (owner-level)

For property owners subscribing to a Rentiro plan, we collect:

• Chosen plan and billing interval
• Payment status (processed via our payment provider — we do not store raw card numbers)
• Subscription history and invoice records

• Service Provision: To provide, maintain, and improve the Service
• Account Management: To create and manage your user account
• Financial Processing: To process invoices and payments within buildings
• Subscription Billing: To manage your Rentiro subscription
• Notifications: To send transactional emails (reminders, receipts, alerts)
• Security: To detect and prevent fraudulent or unauthorised activity
• Legal Compliance: To comply with applicable laws and audit requirements
• Transparent Billing: To ensure all transactions are clear, interest-free and penalty-free

We implement appropriate technical and organisational safeguards, including:

• Passwords stored as bcrypt hashes — never in plain text
• Encrypted data transmission (HTTPS/TLS)
• Multi-factor authentication support
• Role-based access control — users only see data relevant to their role
• Immutable audit trails for all financial transactions
• Regular security reviews

No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We may share your information only in the following circumstances:

• With Building Stakeholders: Other users within your building (e.g. owner sees resident invoices; resident sees their own data only) as determined by your role.
• With Service Providers: Third-party providers such as payment processors, cloud hosting (MongoDB Atlas), and email services (Resend/Nodemailer) — bound by data processing agreements.
• For Legal Compliance: When required by law, court order, or government authority.
• Business Transfer: In connection with a merger or acquisition, with appropriate notice.

We do not sell your personal information to third parties.

• Account Data: Retained while your account is active, and for a reasonable period after closure to handle disputes or legal obligations.
• Financial Records: Retained as required by applicable law (typically 7 years).
• Audit Trails: Retained indefinitely for compliance and security.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Request data portability
• Object to certain processing activities
• Withdraw consent where processing is consent-based

To exercise these rights, contact us at privacy@rentiro.com. We will respond within 30 days.

We use cookies for:

• Authentication: Keeping you logged in securely (session cookies)
• Preferences: Remembering your theme and UI settings
• Security: CSRF protection tokens

We do not use third-party advertising or tracking cookies. You can clear session cookies at any time through your browser; this will log you out of the Service.

Consistent with our commitment to transparent billing:

• We do not use your financial data for interest-based products or services
• We maintain full transparency in how data is processed and stored
• Audit trails are immutable and tamper-evident
• We do not engage in speculative, gambling-related, or exploitative data practices
• Subscription lapses result in account downgrade only — no interest, no penalties, no selling of your data to recover “unpaid” amounts

The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe we have inadvertently done so, contact us immediately.

We may update this Privacy Policy. Material changes will be communicated via email and an in-app notice before they take effect. Continued use after the effective date constitutes acceptance.

Privacy questions or requests:

Rentiro Privacy
Email: privacy@rentiro.com
Contact Form: rentiro.xyz/contact