Privacy Policy

1. Who we are

Rentzy(“we”, “us”) operates this property-rental and co-living management platform. We are the data controller for the personal data described below. For any privacy question or to exercise your rights, contact our grievance/data-protection officer at [privacy@yourdomain.com], [REGISTERED ADDRESS].

2. Data we collect

• Identity & profile: name, email, phone, gender, date of birth, blood group, permanent and work address, profession, and an emergency contact.
• Identity verification (KYC): government ID documents (e.g. Aadhaar, PAN) and their numbers, and a selfie, where required by law or by the property operator.
• Financial data: bank account and IFSC, PAN/GST, and payment and payout records.
• Tenancy & usage data: bookings, visits, enquiries (leads), agreements, invoices, meter readings, and notifications.
• Property media: for operators, uploaded photos which may contain embedded location (GPS) metadata.

3. Why we use it and our legal basis

• To perform your tenancy/booking contract: creating bookings, agreements, invoices and settlements.
• To meet legal obligations: identity verification (KYC), tax and accounting records.
• Our legitimate interests: operating, securing and improving the platform, and preventing fraud.
• Your consent: optional communications and any processing that specifically asks for it. Special-category data such as blood group is processed only where you provide it and with your consent.

4. Who we share it with

We share data only with service providers that process it on our behalf, including:

• Payments: Razorpay (payment and payout processing).
• Identity, e-sign & background checks: the KYC / e-stamping / e-sign / background-check providers configured for your property.
• Communications: our email (SMTP/Resend) and messaging (WhatsApp) providers.
• AI assistance: Google (Gemini) where the in-app assistant is used. This may involve a transfer outside your country under appropriate safeguards.

We do not sell your personal data.

5. International transfers

Where a provider processes data outside [YOUR JURISDICTION], we rely on appropriate safeguards (such as Standard Contractual Clauses or an equivalent mechanism). Details are available on request.

6. How long we keep it

We keep financial, tax and agreement records for the period required by law (in India, generally up to 8 years). Other personal data is kept for as long as your account is active. When you delete your account we erase or irreversibly anonymise your personal data, retaining only records we are legally required to keep, in anonymised form.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent. You can:

• Download your data — request a machine-readable copy of your data via your account, or by contacting us.
• Delete your account — request erasure via your account settings, or by contacting us.

We respond within the timeframe required by applicable law. You may also complain to your data-protection authority.

8. Security

Passwords are stored hashed; integration secrets are encrypted at rest; and identity documents are access-controlled rather than publicly served. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

9. Changes

We may update this policy; material changes will be notified through the platform.