Privacy Policy

Effective date: August 26, 2026

1. Introduction

rentalEase ("we", "us", or "our") is a property management platform operated by HETN, based in Ahmedabad, Gujarat, India. We are committed to protecting your privacy and the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you create an organisation, we collect:

  • Email address
  • Password (stored securely via Firebase Authentication — we never see it in plain text)
  • Your name and organisation name

2.2 Business Data

As you use the Service, you may enter data about your properties, tenants, agreements, invoices, and financial records. This data is stored in Google Cloud Firestore and belongs to you. We do not sell, share, or monetise your business data.

2.3 Usage Data

We automatically collect certain information when you use the Service:

  • Page visits and navigation patterns (activity logs)
  • Login timestamps and IP addresses (for security alerts)
  • Browser type and device information

2.4 Email Communications

We send transactional emails (login alerts, password changes, rent statements, agreement reminders) via Nodemailer (SMTP). These emails are sent only to addresses you configure within the Service.

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To authenticate users and enforce role-based access controls
  • To send security alerts (login notifications, password changes)
  • To send automated business communications (rent statements, renewal reminders) as configured by your organisation
  • To detect and prevent fraud, abuse, and security incidents
  • To communicate with you about your account (support, billing, product updates)

4. Data Storage and Security

  • Your data is stored in Google Cloud Firestore with organisation-level isolation — no user can access data belonging to another organisation
  • Data is encrypted in transit (TLS) and at rest (Google Cloud encryption)
  • Access to your data requires authenticated Firebase ID tokens
  • Serverless API functions (Vercel) include rate limiting and input validation
  • Activity logs track all data modifications for audit purposes

5. Data Sharing and Third Parties

We do not sell your personal or business data. We share data only with the following service providers who assist in operating the Service:

  • Google Firebase — Authentication and database hosting
  • Vercel — Application hosting and serverless functions
  • Nodemailer / SMTP providers — Transactional email delivery

These providers are bound by their own privacy policies and data processing agreements.

6. Your Rights

Subject to applicable law (including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023), you have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Correction — Request correction of inaccurate data
  • Deletion — Request deletion of your account and associated data
  • Export — Export all your business data (properties, tenants, agreements, invoices) via the Backup & Restore feature in Admin settings
  • Withdrawal of Consent — Stop using the Service at any time

To exercise these rights, contact us at patelhet.0507@gmail.com.

7. Data Retention

We retain your account data for as long as your account is active. When you delete your account or organisation, we permanently remove your data from our servers within 30 days. Activity logs are retained for 90 days for security purposes.

8. Cookies and Tracking

The Service uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking scripts. Local storage is used for user preferences (theme, sidebar state, widget layout).

9. Children’s Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective date" above. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

HETN
Email: patelhet.0507@gmail.com