Legal
Privacy Policy
Last updated 30 August 2026
This is a starting draft. Replace it with wording that fits your business and your jurisdiction before you take real customers. Edit it under Content › Legal pages in the admin panel.
Who controls your data
Rentframe is the controller for the personal data described here. Contact us at [email protected].
What we collect
| Data | Why we hold it |
|---|---|
| Name, email, phone | To create your account, sign you in and contact you about the service |
| Property, unit and lease records | Because they are the service — you entered them to manage your portfolio |
| Renter contact details | To send the rent reminders and receipts you configure |
| Uploaded documents | To store and serve the files you choose to keep and share |
| Payment records | To track what is owed and what has been paid |
| Log data (IP address, browser, timestamps) | Security, troubleshooting and abuse prevention |
Why we are allowed to
- Contract — we need this data to provide the service you asked for.
- Legitimate interests — keeping the service secure and working.
- Legal obligation — where we must keep records.
- Consent — for anything optional, which you can withdraw at any time.
Who we share it with
We do not sell personal data. We share it only with the providers needed to run the service — for example email delivery, SMS delivery and file storage — and only what each needs to do its job. Each is bound to protect it.
We may disclose data where the law requires it.
How long we keep it
For as long as your account is open, and afterwards only as long as we need it for legal, accounting or dispute-resolution reasons. You can ask us to delete it sooner.
Where it is held
This service is self-hosted. Your data is stored on the infrastructure the operator has chosen, and is not sent anywhere else except to the providers listed above.
Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, take it elsewhere in a portable format, and complain to a data protection regulator. To exercise any of these, email [email protected].
Security
Passwords are stored hashed, never in plain text. Documents are served through permission checks rather than from a public folder. Access to another account's records is blocked at the database layer.
Changes
If we change this policy materially we will say so on this page and update the date below.