Privacy Policy

1. Who we are & our role

Digitocity operates the Service. When you (a landlord, owner, agency or staff member) enter data about your tenants, owners, staff or visitors, you are the data controller/fiduciary of that data and we act as a processor on your behalf, handling it only to provide the Service. You are responsible for having a lawful basis and any necessary consents to collect and process that data and to contact those individuals.

2. Information we collect

• Account & identity: your mobile number (for OTP sign-in) or, if you sign in with Google, your Google account name and email address; your name, role, business/property details, and profile photo if you add one.
• Business profile: business name, address, phone, email address, GSTIN and logo you add for invoices and receipts.
• Data you enter: properties, units, tenants, owners, leases, rent, bills, expenses, payments, invoices, meter readings, visitors, inventory, tickets, messages and uploaded documents/photos.
• Contact details of third parties you add (e.g. tenants’, owners’, staff’ and visitors’ names, phone numbers, email addresses and addresses). If you pick a contact from your phone to fill in a form, only that contact’s name and number are used; we do not upload your address book.
• Location: if you are a caretaker or staff member and allow it, your device’s location is attached to an operations-log entry you record, as evidence of where it was recorded. It is not collected in the background.
• Purchases: if you subscribe through Google Play or the App Store, the purchase record (product, purchase token and subscription status). We never receive your card or bank details.
• Usage & technical data: log/activity data, last-access time, device/browser information, app interactions, crash logs and diagnostics, and device identifiers (such as a push-notification token) needed to run, secure and improve the Service.

3. How we use information

• To provide, operate, secure and support the Service and your account;
• To generate dues, invoices, reminders and reports you request;
• To send transactional communications (e.g. OTPs, due/lease reminders, and messages you choose to send) via in-app alerts, SMS or WhatsApp;
• To maintain an audit trail of sensitive actions for your security and accountability;
• To bill you for paid plans (if applicable) and to comply with law;
• To detect, prevent and address fraud, abuse or technical issues, and to improve the Service.

4. Sharing & sub-processors

We do not sell your data. We share it only with trusted service providers who process it on our behalf to run the Service, including: Google Cloud / Firebase (hosting, database, authentication, push notifications, crash reporting and app analytics), Google Play and Apple (in-app subscriptions), Meta / WhatsApp and SMS providers (message delivery, where you use those features), and payment gateways (where you use online payments). We may disclose data if required by law or to protect our rights, users or the public. If we undergo a merger or acquisition, data may transfer as part of that transaction.

5. Data storage, location & security

Data is stored on Google Cloud infrastructure and may be processed in data centres in or outside India. We apply reasonable technical and organisational measures, including encryption in transit, encryption at rest, role-based access control and a controlled server-side data gateway. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security; you use the Service at your own risk and are responsible for safeguarding your device and OTP.

6. Retention

We retain your data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal, tax or accounting obligations or to resolve disputes. Audit-log entries are retained for up to 365 days and then automatically deleted. You can delete your account, or ask us to delete your data, as described in section 8.

7. Your rights

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023), you may request to access, correct, update or delete your personal data, or withdraw consent, by contacting us using the details in section 12. Where you have entered data about other individuals, requests from those individuals should generally be directed to you (the controller); we will support you as your processor.

8. Deleting your account and data

This section applies to the Rentify Services Android and iOS apps and the website.

A. Delete your account yourself (account owners and admins). In the app, open More → Business profile → Danger zone → Delete account and confirm. On the website, open Settings → Danger zone → Delete all data. This takes effect immediately and permanently deletes:

• your account and sign-in (mobile number or Google account link, name and email address);
• your organisation, its team and pending invitations;
• all properties, units, tenants, owners, leases, bills, payments, expenses, invoices, meter readings, tickets, vendors, inventory and your business profile.

If you only want to clear your records but keep your account and team, use Wipe data on the same screen in the app instead.

B. Ask us to delete your account or data. If you cannot use the option above — for example you are a tenant or staff member, you no longer have the app, or you want only some of your data deleted — contact us (see section 12) from the mobile number registered on your account and tell us:

• that you want your Rentify Services account or data deleted;
• your name and registered mobile number (and email address, if you signed in with Google);
• whether you want the whole account deleted or only specific data (for example your email address or uploaded documents).

We will confirm your request within 7 days and complete it within 30 days. If you are a tenant, owner or staff member whose details were entered by a landlord or agency, we may also forward your request to them as the controller of that data.

What we keep, and for how long.

• Audit-log entries (records of who did what, used for security and dispute resolution) are kept for up to 365 days and then automatically deleted.
• Uploaded files, backups and system logs may keep copies for up to 30 days after deletion before they are removed.
• Records we must keep by law (for example tax or payment records for a paid subscription) are kept only for the period the law requires.
• Google Play or App Store subscriptions are managed by Google or Apple. Deleting your account does not cancel them — cancel them in your Google Play or App Store subscription settings.

9. Cookies & local storage

The Service uses essential browser storage (e.g. to keep you signed in and remember preferences). It does not use advertising cookies.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

11. Changes

We may update this Policy from time to time; the “Last updated” date shows the latest version. Continued use after changes take effect constitutes acceptance.