Privacy Policy

Rento (“we,” “our,” or “us”) is committed to protecting the privacy of individuals who use our property management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the “Platform”).

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use the Platform. This Policy is intended to comply with the Information Technology Act, 2000 (India) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information We Collect

We collect several types of information from and about users of our Platform, including:

a. Personal Identification Information

• Account Information: Name, email address, phone number, postal address, and organization details when you register an account.
• User Profile Data: Job title, role within the organization (Owner, Manager, Accountant, etc.), and profile preferences.
• Tenant Information: Names, contact details, lease documents, identification documents, and emergency contact information of tenants managed through the Platform.
• Payment Data: Rent payment records, transaction amounts, dates, payment methods, and invoice or receipt details. We do not store full credit/debit card numbers or bank account details; such data is processed through secure third-party payment gateways.

b. Property and Business Information

• Property addresses, building details, and rental unit descriptions.
• Lease terms, rent amounts, deposit records, and billing cycles.
• Utility meter readings and electricity charge records.
• Financial reports, revenue summaries, and occupancy analytics.

c. Technical and Usage Data

• Log Data: IP address, browser type, operating system, referring URLs, and access times.
• Device Information: Device type, unique device identifiers, and mobile network information.
• Usage Data: Pages viewed, features used, time spent on the Platform, and navigation patterns.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operations: To provide, maintain, and improve the Platform, including tenant management, rent tracking, billing, and reporting.
• Billing and Payments: To process rent payments, generate invoices, issue receipts, and manage overdue accounts.
• Communication: To send notifications about billing cycles, payment confirmations, lease renewals, and account-related updates.
• Customer Support: To respond to your inquiries, resolve issues, and provide technical assistance.
• Analytics and Improvement: To analyze usage patterns, optimize Platform performance, and develop new features.
• Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of our users.

3. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

• Encryption: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) protocols. Sensitive data is encrypted at rest using AES-256 encryption.
• Secure Infrastructure: Our servers are hosted in secure data centers with restricted physical and logical access controls, firewalls, and intrusion detection systems.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication and audit logging.
• Password Security: User passwords are hashed using PBKDF2 with HMACSHA256 and securely stored. We never store plain-text passwords.
• Regular Audits: We conduct periodic security reviews and vulnerability assessments to maintain the integrity of our systems.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data:Retained for the duration of your account's active status and for a reasonable period thereafter to comply with legal obligations or resolve disputes.
• Financial Records: Rent payment and billing records are retained for at least 8 years as required by Indian tax and accounting regulations.
• Logs and Analytics: Usage logs are retained for a maximum of 12 months for security analysis and platform improvement.
• Deleted Accounts: Upon account deletion, we anonymize or delete personal data within 90 days, except where retention is required by law.

5. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal data.
• Right to Deletion: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data under certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of your data for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at the details provided below. We will respond to your request within 30 days as required under applicable law.

6. Third-Party Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment Processors: We share payment transaction data with secure third-party payment gateways solely for the purpose of processing rent payments.
• Service Providers: We engage trusted third-party vendors for cloud hosting, email delivery, customer analytics, and customer support. These vendors are bound by data processing agreements and are prohibited from using your data for any other purpose.
• Legal Compliance: We may disclose information if required to do so by law, court order, or government regulation, or to enforce our Terms of Service.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership.

7. Cookie Policy

Our Platform uses cookies and similar tracking technologies to enhance your experience and analyze usage.

Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly, including authentication cookies and session management. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Analytics Cookies: Help us understand how users interact with the Platform, which features are used most, and identify areas for improvement.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

8. Compliance with Indian IT Act, 2000

Rento complies with the Information Technology Act, 2000 (India) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

• We have implemented reasonable security practices and procedures as prescribed under the IT Act, 2000, including managerial, technical, operational, and physical security controls.
• We do not collect sensitive personal data or information (as defined under the IT Rules) unless it is voluntarily provided by the user for the purpose of using the Platform.
• We provide a grievance redressal mechanism as required under Section 43A of the IT Act, 2000.
• We ensure that your information is not transferred to any country that does not provide adequate data protection standards unless contractual safeguards are in place.

9. Children's Privacy

Our Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information. If you believe a child has provided us with their data, please contact us immediately.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by email (to the address associated with your account) and/or through a prominent notice on the Platform. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically for the latest information.

11. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, any complaints or concerns regarding the processing of your personal information may be addressed to our Grievance Officer:

12. Contact Information

If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, please contact us: