Privacy Policy

Rent360 (“Rent360”, “we”, “us”) provides property rental management software at rent360.co. This policy explains what personal data we collect, why, how long we keep it and the choices you have. It applies to visitors of our website, to customers who open a Rent360 account (landlords, property managers and their staff) and to the tenants, owners and vendors whose details customers record in the service.

1. Who is responsible

For data about website visitors and account holders, Rent360 is the data controller. For data that a customer enters about its tenants, owners, vendors and properties, the customer is the controller and Rent360 processes that data on the customer’s instructions under our Terms of Service. Contact for all privacy matters: info@rent360.co.

2. What we collect

Account and billing data

• Name, work email, phone number, company name and role when you create an account or request a demo.
• Subscription plan, invoices and payment status. Card details are collected and stored by our payment processor (Stripe); we never see full card numbers.

Data you enter into the service

• Buildings, units, leases, rent schedules, cheques and receipts, maintenance tickets, inspections, vendor contracts and expenses.
• Tenant and owner records: names, contact details, nationality and identity-document details (Emirates ID, passport, trade licence) where you choose to upload them, Ejari/Tawtheeq registration data.
• Documents and photos you upload.

Usage and technical data

• Log data such as IP address, browser, pages viewed, actions taken and timestamps, used for security, audit trails and improving the product.
• Cookies: a session cookie that keeps you signed in, a language/theme preference, and — on the public website only — Google tags (Google Ads and, when enabled, Google Analytics) that measure which pages and campaigns bring visitors and whether they sign up or request a demo. These tags are not loaded inside the signed-in application area.

3. Why we use it

• To provide the service: manage tenancies, generate notices, track cheques and payments, send reminders, keep the tamper-evident evidence ledger.
• To run our business: billing, support, fraud and abuse prevention, security monitoring.
• To communicate: onboarding emails, product updates, reminders you configure. Marketing emails are sent only to people who signed up or asked for a demo, and every one has an unsubscribe link.
• To improve the product: aggregated, de-identified usage analysis.

4. AI features

Some features (reading an identity document, summarising a maintenance ticket, drafting a bilingual notice, extracting a vendor contract) send the relevant document or text to an AI model provider (Anthropic) to produce a result. Data sent for these features is used only to generate that result and is not used by the provider to train models. You can use the service without these features.

5. Who we share data with

We do not sell personal data. We share it only with processors that help us run the service, under contracts that restrict their use of it:

• Supabase (database and file storage, hosted in the Mumbai, India region) and Vercel (application hosting and content delivery).
• Stripe (payments), Resend (transactional email), Anthropic (AI features described above), Google (website analytics and advertising measurement on the public site).
• Messaging providers you enable for tenant notifications (email, WhatsApp, SMS).
• Authorities or courts where the law requires it, and professional advisers under confidentiality.

6. International transfers

Rent360 serves customers in the United Arab Emirates and the wider GCC. Data is stored in India (Supabase, Mumbai) and processed by providers in the United States and the European Union. We rely on contractual safeguards with each provider. By using the service you acknowledge these transfers.

7. Retention

• Account data: for the life of the account and 12 months after closure, unless a longer period is required for tax or legal reasons.
• Tenancy, financial and evidence-ledger records: kept for the customer for as long as the account is active; customers can export their data at any time and request deletion on closure. UAE tenancy and accounting rules may require customers to retain certain records for up to 5 years.
• Website analytics: Google’s standard retention (up to 14 months) and our own logs for 90 days.

8. Security

Data is encrypted in transit (TLS) and at rest, access is role-based and every sensitive action is written to an audit log. Evidence records are hash-chained so that tampering is detectable. Passwords are stored as salted hashes and never in plain text. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you without undue delay.

9. Your rights

Depending on where you live (including under the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021), you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. Account holders can do most of this from the application; anyone can email info@rent360.co. If you are a tenant or owner whose data was entered by a Rent360 customer, please contact that customer first; we will help them respond.

10. Children

The service is for businesses and is not directed at anyone under 18.

11. Changes

We will post any changes on this page and, for material changes, notify account holders by email. Continued use after the effective date means you accept the updated policy.