1. Introduction

RentSight ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our property management platform and services.

We comply with the Personal Information Protection Act (PIPA) of Alberta and the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada.

2. Information We Collect

Account Information

Name and email address
Password (stored in encrypted/hashed form)
If you sign in with Google, your name and email address as provided by your Google account
Account preferences and settings

Property and Financial Data

Property addresses and details
Property values and mortgage information
Rental income, expense transactions, and tax-related details you enter
Tenant information (names, contact details, lease terms)
Unit details and occupancy status

Documents and Uploaded Files

Lease documents you upload, and the lease details extracted from them
Receipt images you scan, and the transaction details extracted from them
Documents you send for electronic signature, and their signing status

Uploaded files are kept in access-controlled storage and are only accessible to your account and, for documents you send for signature, to the recipient you choose.

Tenant Portal Data

Messages exchanged between landlords and tenants through the tenant portal
Maintenance requests and related comments submitted by tenants

Usage Data

When you use the platform, our hosting provider automatically logs technical data such as your IP address, browser type, and the pages you request, and collects anonymous performance metrics (such as page load times). We do not use behavioral analytics or advertising trackers.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card numbers. Stripe may collect and store payment information in accordance with their privacy policy.

3. How We Use Your Information

We use your personal information to:

Provide and maintain our property management services
Process your subscription and payments
Power optional AI features you actively use, such as receipt scanning, lease document extraction, portfolio insights, and communication drafting
Send you service-related communications and updates
Respond to your inquiries and provide customer support
Improve and optimize our platform
Detect and prevent fraud or security issues
Comply with legal obligations

4. Legal Basis for Processing

We process your personal information based on:

Consent: When you create an account and agree to our terms
Contractual Necessity: To provide the services you have requested
Legitimate Interests: To improve our services and ensure platform security
Legal Compliance: When required by law

5. Information Sharing

We do not sell your personal information. We share information only with the service providers we rely on to operate the platform:

Supabase: Our database, authentication, and file storage provider — all data you enter and files you upload are stored with Supabase
Stripe: For payment and subscription processing
Resend: For transactional email delivery (for example account emails, tenant portal invitations, and two-factor authentication codes)
OpenAI: When you actively use an AI feature, the relevant content is sent to OpenAI for processing — receipt images for receipt scanning, lease documents for lease extraction, and property, tenant, and portfolio details for insights and communication drafting. Under OpenAI's API terms, data submitted through the API is not used to train their models
DocuSeal: When you send a document for electronic signature, the document and the signer's name and email address are shared with DocuSeal to create the signing session
Vercel: Our hosting provider, which processes requests to the platform and collects anonymous performance metrics
Google: Only if you choose to sign in with Google, for authentication
Legal Authorities: When required by law or to protect our rights

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

6. Cookies and Local Storage

We use only essential cookies required to operate the platform. We do not use advertising cookies, cross-site trackers, or third-party behavioral analytics. The cookies we set are:

Authentication cookies: Secure, HTTP-only session cookies that keep you signed in
Remember me: Stores your "remember me" choice for up to 90 days so you stay signed in between visits
Two-factor authentication: A short-lived (15-minute) cookie that marks a sign-in awaiting two-factor verification
Onboarding status: A short-lived (1-hour) cookie that caches whether you have completed onboarding
Tenant portal session: A secure, HTTP-only cookie (30 days) used only within the tenant portal to keep tenants signed in

Your browser's local storage is used only for interface preferences, such as your theme choice, saved analysis scenarios, and cached insight text. It never contains passwords or payment information.

7. Tenant Information

If you are a tenant whose landlord uses RentSight, your landlord enters and controls your information (such as your name, contact details, and lease terms) and is responsible for having the authority to share it with us. We process this information on your landlord's behalf to provide the service — for example, to send tenant portal invitations, deliver messages, and process e-signature requests.

To access, correct, or delete your information, please contact your landlord directly. You may also reach us at support@rentsight.app and we will assist with or forward your request.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You can delete your account at any time from Settings. When you do:

Your account data — including properties, tenant information, transactions, communications, and uploaded documents and files — is deleted immediately
Residual copies in encrypted backups are purged within 90 days
Some data may be retained longer if required by law

9. Your Rights

Under PIPA and PIPEDA, you have the right to:

Access: Request a copy of your personal information
Correction: Request correction of inaccurate information, or edit it directly in the app
Deletion: Delete your account and all associated data yourself from Settings, or request deletion by contacting us
Data Portability: Export your properties, transactions, and financial data as CSV or PDF from within the app, or request your data in a portable format
Withdraw Consent: Withdraw consent for data processing

To exercise these rights, please contact us at support@rentsight.app

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit (TLS/SSL) and at rest
Secure password hashing
Row-level security in our database
Optional two-factor authentication for your account
Regular security assessments
Access controls and authentication

11. International Data Transfers

Your data may be processed and stored in the United States through our service providers (Supabase, Stripe, Resend, OpenAI, DocuSeal, and Vercel). These transfers are necessary to provide our services and are conducted with appropriate safeguards in place.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: support@rentsight.app

If you are not satisfied with our response, you may file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC).