Last updated: May 2025 · Effective: May 2025
This policy explains what personal information RentyBase collects, why we collect it, and how you can control it. We have written it to be readable — not just legally defensible. If something is unclear, email us.
RentyBase ("we", "us", "our") is a rental management platform built for Indian landlords and tenants. We operate the website rentybase.com and the RentyBase mobile application.
Contact: hello@rentybase.com
Account information: When you sign in with Google, we receive your name, email address, and profile photo from Google OAuth. We do not receive or store your Google password.
Profile information you provide: Full name, phone number, PAN number (required for HRA receipt generation if annual rent exceeds ₹1 lakh), UPI ID, and profile photo.
Rental data: Property addresses, rent amounts, payment dates, UTR/reference numbers, payment method, and notes you enter when logging payments.
Photos: Room photos you upload as move-in or move-out proof, repair photos attached to repair requests.
Device information: Push notification token (if you grant permission), device type, and browser/app version for support purposes.
Usage data: Pages visited, features used, and error logs — collected in aggregate to improve the product.
·Provide the service: Generate HRA rent receipts, maintain payment ledgers, store move-in/move-out proof, and connect landlords with tenants.
·HRA receipt generation: Your name, landlord's PAN, rent amount, rental period, and property address are used to generate Section 10(13A)-compliant receipts.
·Notifications: Push notifications (via Expo) and WhatsApp messages (via Twilio) for rent reminders and rental activity — only if you have granted permission.
·Support: We may use your email to respond to questions or send important service updates.
·Security: To detect fraud, prevent abuse, and protect user data.
We do not sell your personal information to third parties. We do not use your data for advertising.
Supabase: Our database and authentication provider. Your data is stored in Supabase's managed Postgres infrastructure (hosted on AWS, region: ap-south-1). Supabase processes data under appropriate data processing agreements.
Google: Used for authentication only. We receive basic profile information at sign-in; we do not send your rental data to Google.
Razorpay: Payment processing for rent collection. When you initiate a payment, a Razorpay order is created. Razorpay may collect payment method and transaction data per their own privacy policy.
Twilio: Used to send WhatsApp notifications for rent reminders. Phone numbers are shared with Twilio only when sending a notification.
Your co-party in a rental: Landlords and tenants in the same rental can see the shared ledger — payments, deposit transactions, move-in photos, and repair requests — by design. This shared access is the core function of the product.
We retain your account data for as long as your account is active. Rental records (payments, receipts, photos) are retained for the lifetime of the rental plus 7 years, consistent with Indian income tax documentation requirements.
Move-in and move-out photos are retained permanently by default, as they serve as legal proof of property condition. You may request deletion (see Section 7).
If you delete your account, your personal profile information is deleted within 30 days. Rental records in which another party (landlord or tenant) also participated will be anonymised rather than deleted, to preserve the other party's records.
All data is transmitted over TLS (HTTPS). Photos are stored in Supabase Storage with access controls. Database access is restricted by row-level security (RLS) policies — each user can only read records they are a party to.
PAN numbers are stored encrypted at rest. Push tokens are stored only to deliver notifications and are rotated on each app session.
No system is perfectly secure. If you become aware of any security issue, please contact us immediately at hello@rentybase.com.
You have the right to:
·Access the personal data we hold about you.
·Correct inaccurate data via your profile settings.
·Delete your account and associated personal data.
·Export your rental data (payment history, receipts) — contact us and we will provide a data export within 14 days.
·Withdraw consent for notifications at any time in device or app settings.
To exercise any right, email hello@rentybase.com from the address associated with your account. We will respond within 14 days.
RentyBase is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@rentybase.com and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make significant changes, we will notify users via the app and update the "Last updated" date at the top of this page. Continued use of RentyBase after changes constitutes acceptance of the updated policy.
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). Any disputes arising from this policy shall be subject to the jurisdiction of courts in India.
For privacy questions, data requests, or to report a concern:
Email: hello@rentybase.com
Response time: within 14 business days