Privacy policy

1. Who we are

Rentally is run by Chanvis Solutions OPC Private Limited, India ("we"). We decide how your personal data is used in Rentally, so under India's Digital Personal Data Protection Act, 2023 we are responsible for it.

2. What we collect

Account: your name, mobile number, email address, and whether each has been verified. Optionally, your permanent address (printed in your agreements) and your UPI ID (so the other person on a tenancy can pay you).

Tenancies: the home's address, the terms you agree, agreements and signed copies you upload, rent and bill records (including payment references and screenshots you add), repair requests, move-in and move-out checklists with photos and meter readings, the deposit settlement, and review answers.

Vacancies: the details and photos of a home you advertise, and the interest people express in it.

AI assistant: the questions you ask and its answers, if you use it.

Activity: a timeline of actions on each tenancy, who viewed your profile and how, lookups you make, and the consents you give (for example, accepting the terms or sharing your profile).

Time in the app: how many minutes a day you actively use Rentally (counted only while it is on screen and in use). Just a daily total: never which pages you open, what you click or type. We use it, as totals across everyone, to understand how the service is used.

Technical: cookies that keep you logged in and remember your city, and the basic logs our hosting providers keep (such as IP address and device) to run and protect the service.

Phone notifications: if you turn them on, the push address your browser gives for that device, and a short device name (such as "Android, Chrome"). Turning them off or logging out on that device removes it.

3. What we never collect

ID numbers such as Aadhaar or PAN: these are written by hand on the printed agreement and never entered in Rentally.

Bank or card details. Rentally never holds or moves your money; UPI payments happen in your own UPI app.

We use no advertising trackers and no third-party analytics: the daily time total above is counted by Rentally itself.

4. Why we use it

To run Rentally: create and manage tenancies, prepare agreements, keep records and build your rental history.

To show the other person on your tenancy what they need, and to send you notifications and reminders in the app and by email (you can turn emails off).

To keep Rentally safe: preventing fake accounts, tenancies and reviews, and misuse.

To meet our legal obligations.

We use your data on the basis of your consent, given when you sign up and accept the terms, and when you choose to share. You can withdraw it (see section 8).

5. Who can see what

The other person on a tenancy sees that tenancy's records and, once the tenancy is confirmed, your full name and phone number. Your UPI ID is visible only to them. Your permanent address appears only in your shared agreement.

Your rental profile (first name and last initial, member since, completed tenancies, confirmed facts and, from 2 tenancies, opinions) is seen only by people you share it with, people who look up your exact phone number or email if you allow it, the other person on your tenancies, and people who open your vacancy link. There is no search or public list, and you can see who viewed it.

Your phone, email, address and ID numbers are never shown on your profile.

We do not sell your data.

6. Services we use

Supabase (database, login and file storage), with your data stored in its Mumbai, India region.

Vercel (hosting the website).

An email provider to send login codes and notifications.

Your phone's push service (Google for Android and Chrome, Apple for iPhone), only if you turn on phone notifications: it delivers the notification text, encrypted so the service can't read it, never your tenancy records.

Anthropic (the AI assistant): only when you use an assistant. A tenancy's assistant sends that tenancy's agreement and records; an owner's "Ask about my homes" sends a summary of the records of the homes they own (no agreements). They go to Anthropic only to answer your question. This is processed outside India, under Anthropic's commercial terms, which say it doesn't use this data to train its models.

Sentry (error reports): when something breaks, a technical report of the error (what failed, where in our code, the page address with any link codes removed, and your browser type) so we can fix it. It never includes your name, email, phone, IP address, cookies or what you typed. This may be processed outside India.

These providers process data only on our instructions and to run Rentally.

7. How long we keep it

We keep your data while your account is open.

When you delete your account, we remove straight away your name, phone, email, UPI ID, address, share links, AI conversations, notifications, phone-notification devices, time-in-the-app totals, the lookups you made and profile views, vacancy photos, and saved homes never used in a tenancy. Records you share with someone else on a tenancy (the agreement, rent, bills, repairs, checklists, the deposit and reviews) stay available to them, with your name shown as "Deleted", except in the agreement itself, which is kept as it was signed. We keep them so either of you has them if a disagreement or legal claim comes up. We keep a record of the consents you gave and of your deletion request, as proof.

Shared tenancy records, including the agreement, are kept for 3 years after the tenancy ends (or after it was cancelled), then deleted, whether or not either account is still open.

Backups may hold copies for a short time before they are overwritten. We may keep some records longer where the law requires it.

8. Your rights

See and download your data: Profile & settings > Download or delete your data.

Correct it: edit your details in Profile & settings. Shared tenancy records are corrected by proposing new terms or disputing a record.

Delete your account: in Profile & settings, once you have no unfinished tenancy.

Withdraw consent: turn off phone or email lookup, stop your share link or email notifications at any time. Withdrawing doesn't affect what was done before.

Nominate someone to exercise these rights for you if you die or can't act, and complain to us, then to the Data Protection Board of India if you're not satisfied.

9. Security

Data is encrypted in transit. Each tenancy's records can be read only by its two parties; files are stored privately and opened through short-lived links. No system is perfectly secure, so if we learn of a breach affecting you, we will tell you and the authorities as the law requires.

10. Children

Rentally is for people aged 18 and over. We don't knowingly collect data from children.

11. Changes

We may update this policy. If the changes are significant, we'll tell you in the app or by email before they apply.

12. Contact and grievances

Questions or complaints about your data go to our grievance officer. Their details are on the contact page.