Legal

Privacy Policy

Effective date: August 26, 2026

1. Introduction

Rentalease ("we", "us", or "our") is a property management platform operated by HETN, based in Ahmedabad, Gujarat, India. We are committed to protecting your privacy and the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you create an organisation, we collect:

  • Email address
  • Password (stored securely via Firebase Authentication — we never see it in plain text)
  • Your name and organisation name

2.2 Business Data

As you use the Service, you may enter data about your properties, tenants, agreements, invoices, and financial records. This data is stored in Google Cloud Firestore and belongs to you. We do not sell, share, or monetise your business data.

2.3 Usage Data

We automatically collect certain information when you use the Service:

  • Page visits and navigation patterns (activity logs)
  • Login timestamps, browser type and device information (for security alerts)

2.4 Email Communications

We send transactional emails (login alerts, password changes, rent statements, agreement reminders) via Nodemailer (SMTP). Business emails go to addresses you configure within the Service; account essentials such as verification codes, security alerts, and payment receipts are sent to your account email address.

2.5 Contact and Lead Forms

If you contact us through a lead form, setup-call request, or Report an Issue, we receive the name, email address, phone number, and message you submit, and use it only to respond. Lead details are forwarded to our team inbox and are not stored as accounts.

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To authenticate users and enforce role-based access controls
  • To send security alerts (login notifications, password changes)
  • To send automated business communications (rent statements, renewal reminders) as configured by your organisation
  • To detect and prevent fraud, abuse, and security incidents
  • To communicate with you about your account (support, billing, product updates)

4. Data Storage and Security

  • Your data is stored in Google Cloud Firestore with organisation-level isolation — no user can access data belonging to another organisation
  • Data is encrypted in transit (TLS) and at rest (Google Cloud encryption)
  • Access to your data requires authenticated Firebase ID tokens
  • Serverless API functions (Vercel) include rate limiting and input validation
  • Activity logs track all data modifications for audit purposes

5. Data Sharing and Third Parties

We do not sell your personal or business data. We share data only with the following service providers who assist in operating the Service:

  • Google Firebase — Authentication and database hosting
  • Vercel — Application hosting and serverless functions
  • Nodemailer / SMTP providers — Transactional email delivery
  • Razorpay — Payment processing for subscriptions and the one-time trial fee. When you pay, Razorpay receives your contact details and payment-instrument metadata (card network, UPI handle, transaction IDs) directly — we never see or store your full card numbers, UPI PINs, or bank credentials. Razorpay processes this data under its own Privacy Policy and Terms of Service.
  • Sentry — Crash and error diagnostics, only when enabled in the deployment. Error reports may include your user ID and email, organisation context, and error details; session replay masks on-screen text and blocks media.
  • KookiOk — Consent banner script loaded from its content network on every page; loading it transmits standard request data such as IP address and user agent.
  • Google Fonts — Typefaces loaded from Google's content network when pages render.
  • Google Gemini — AI assistant features. When you use portfolio questions and answers, voucher drafting assistance, or invoice explanations, the relevant information from your Rentalease data (such as names, units, amounts, tax figures, and the question you type) is processed by Google's Gemini API to generate the response. Personal identifiers in stored summaries are masked where possible — avoid including sensitive personal data in your questions. Prompts are not stored by Rentalease.

These providers are bound by their own privacy policies and data processing agreements.

6. Your Rights

Subject to applicable law (including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023), you have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Correction — Request correction of inaccurate data
  • Deletion — Request deactivation of your account or removal of your organisation (see Data Retention below for what is removed and what is retained)
  • Export — Export all your business data (properties, tenants, agreements, invoices) via the Backup & Restore feature in Admin settings
  • Withdrawal of Consent — Stop using the Service at any time

To exercise these rights, contact us at [email protected].

7. Data Retention

We retain your account data for as long as your account is active. When deactivation or organisation removal is processed, member access is revoked and the organisation record is removed. Billing, accounting, and audit records may be retained where required for financial, legal, or security purposes. Activity logs are append-only and kept for security purposes.

8. Cookies and Tracking

The Service does not use cookies for authentication or tracking. Authentication uses Firebase sessions with a session token kept in browser local storage. Local storage is also used for user preferences (theme, sidebar state, widget layout), your remembered login email, and AI consent choice.

9. Children’s Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective date" above. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

HETN
Rentalease was created and developed by Het Patel.
Ahmedabad, Gujarat, India
Email: [email protected]
Phone: +91 7990335146