Privacy & Data Protection
How we protect your data and privacy.
RentFlow is committed to transparent, secure data management in compliance with the Digital Personal Data Protection (DPDP) Act 2023 and global data privacy standards.
1. Information We Collect
We collect information necessary to provide seamless property, lease, and rent management services:
- Property Operator Details: Name, business email, mobile number, organization name, and billing details.
- Resident & Tenant PII: Full legal name, verified mobile phone, email address, permanent address, occupation, and emergency contact information.
- KYC Verification Records: Identity documents (Aadhaar, PAN, Voter ID, Driving License, or Passport) and verification selfies uploaded during digital onboarding.
- Financial & Payment Transaction Data: Invoices, payment ledgers, payment mode, bank account IFSC codes, UPI handles, and transaction UTR references.
2. Purpose of Data Processing
RentFlow acts as a data processor on behalf of property owners and operators. We process data strictly for:
- Generating accurate rental, utility, and maintenance invoices.
- Conducting lawful tenant verification and regulatory police intimation records.
- Sending automated transactional notifications (bill delivery, receipt confirmations, and rent alerts).
- Maintaining immutable financial audit trails and tax ledger exports.
3. Multi-Tenant Data Isolation & Security
Every organization in RentFlow operates within a strictly isolated multi-tenant boundary. Database queries enforce compound foreign keys (org_id checks at the PostgreSQL engine level). Plaintext passwords are never stored; authentication credentials are encrypted using industry-standard bcrypt, and OTP verification codes are hashed using HMAC-SHA256 before persistence.
4. Data Retention & Erasure
Tenant records, payment histories, and invoices are retained for the duration of the active tenancy and any legally mandated financial record-keeping period (up to 7 years under Indian taxation laws). Residents and operators may request data correction or deletion of unneeded records by contacting their property administrator or our grievance office.
5. Grievance Officer & Contact Information
In accordance with the Digital Personal Data Protection Act 2023 and Information Technology Rules, questions or complaints regarding data processing may be directed to our Grievance Officer:
Looking for our Terms of Service?
Read our operator agreement and platform terms.