Privacy policy
In plain words: what we collect, why we collect it, who can see it, and what you can ask us to do.
Last updated 9 October 2026
This policy covers RentEase, run by RentEase (Agra, Uttar Pradesh, India). We process personal data under India’s Digital Personal Data Protection Act, 2023. If anything here is unclear, write to us at grievance@rent-ease.in.
What we collect
| Data | Why |
|---|---|
| Mobile number | To confirm it is you (one-time code) and to link you to your rental records. It is your login. |
| Name | So the other person on a tenancy or a conversation knows who they are dealing with. |
| UPI ID (landlords, optional) | To let a tenant open their UPI app with your ID and the amount filled in. We never move the money. |
| Rental records | Property and room names, rent, deposit, due dates, charges, payments, receipts, notes, move-out statements, and the activity timeline. |
| Listings and photos | What you post when you advertise a place. The full address you enter stays private to you. |
| Messages | Conversations between an owner and a person interested in a listing, and the numbers either side chooses to share. |
| Technical data | A login cookie, and ordinary server logs (time, page, device type) used to keep the service running and safe. |
What we do not collect: Aadhaar or PAN numbers, ID documents, bank account details, bank or UPI passwords, card numbers, contacts from your phone, or your location.
Who can see your data
- The landlord and tenant on a tenancy see the same record: charges, payments, receipts, notes and timeline. Nobody else can open it.
- An owner and a person who enquires see their own conversation. Phone numbers are hidden until each person chooses to share theirs.
- Everyone can see published listings: the title, description, photos, locality, rent and the owner’s first name and verification badges. The exact address and phone number are not shown.
- Service providers that run the service for us, such as hosting and the companies that deliver SMS or WhatsApp messages. They may process data only to provide those services to us.
- Authorities, where the law requires us to share information.
Keeping your account safe
- A tenant must confirm. When a landlord adds your number, you see only the landlord’s name, the property and the room until you tap “Yes, this is my home”. If you say no, nothing about the home is shown to you, and the landlord is asked to check the number. We send no rent amounts to a number that has not confirmed.
- Phone numbers can be reassigned. If an account has not been used for 90 days, we ask “is this still your account?” before opening it, and show only the first letter of the name and the dates. Someone who has a new number can start a fresh, empty account. You can move your own account to a new number in Account and security, and we warn the old number when you do.
- Log out everywhere and download my data are in Account and security. We also limit how many codes can be requested from one connection.
- Encryption. UPI IDs, addresses, payment references, repair descriptions, chat messages and the text of messages we send are stored encrypted, and so are photo files. Names and phone numbers are used to find records, so they are protected by the database and server security rather than encrypted in the same way.
Rent passport
A tenant can choose to make a link that shows their month-by-month rent payment record to someone else, such as a new landlord. The link shows the tenant’s name, the start of the tenancy, the landlord’s name and whether each month was paid on time, for one home or for all the homes the tenant has rented through RentEase, as the tenant chooses. It does not show phone numbers. The link works only for the period the tenant picks (7, 30 or 90 days), can be stopped by the tenant at any time, and is not listed on search engines. The landlord can see on the shared timeline that the tenant made a link. Anyone who has the link can read it, so share it only with people you trust.
We do not sell personal data. We do not show advertisements and we do not share data with advertisers.
Messages we send you
We send messages about your own rent and conversations: login codes, reminders, receipts, rent changes, move-out statements, and replies to enquiries. Tenants can turn rent reminders off for a tenancy at any time. We do not send promotional messages to tenants. Non-urgent messages are held between 9 pm and 8 am India time.
Cookies
We use one cookie, which keeps you logged in. It is strictly necessary for the service and expires after 30 days. We do not use advertising or tracking cookies. We count visits to our public pages (how many people, which pages, roughly where from) with a service that uses no cookies and keeps no personal profile. Pages that show your private records, and secret links, are never counted.
How long we keep data
- Login codes expire after 10 minutes and are stored only as one-way hashes.
- Login sessions last up to 30 days or until you log out.
- Rental records stay when a tenancy ends, so a tenant can always look back at every home and payment in “My rental history” and download them. We do not delete a finished tenancy because the tenant moved out.
- Rental records are kept while the account is active. A tenancy record is shared between two people, so if one person asks us to delete their account, the other person may still keep their copy of the shared record (with the deleted person’s details limited to what the record needs).
- Listings can be paused or marked rented at any time. Photos are removed when you delete them.
Your rights
You can ask us to: tell you what data we hold about you, correct it, erase it, or stop using it, and you can withdraw consent at any time. Everyone can download their data from Account and security. Landlords can download their payment records as a spreadsheet from the app whenever they like. To use any other right, email grievance@rent-ease.in from the registered phone’s owner details, and we will respond within a reasonable time and in any case within the period the law prescribes.
You can also complain to the Data Protection Board of India if you are not satisfied with how we handled your request.
How we protect your data
- Login uses one-time codes. Codes and session tokens are stored only as hashes, and wrong guesses are limited.
- Every record is tied to the two people it belongs to. Access is checked on the server for every request.
- Payment and charge records are append-only: corrections are shown as visible reversals with a reason.
- Connections to the service are encrypted in transit (HTTPS).
- Uploaded photos are checked by file type and stored under random names.
No system is perfectly secure. If a breach affects your data, we will inform you and the Data Protection Board as the law requires.
Children
RentEase is for adults. We do not knowingly collect data from anyone under 18.
Changes to this policy
If we change this policy in a way that matters, we will tell you inside the app before the change applies. The date at the top shows the latest version.
Grievance officer
Dinesh Kumar, grievance@rent-ease.in.