Privacy Policy
Last updated: April 14, 2026
1. Introduction
2. Information We Collect
Information you provide:
- Mobile number (used for OTP authentication)
- Full name and email address
- Property details (address, rent amount, unit details)
- Tenant information (name, phone, email)
- Payment information (processed by Razorpay — we do not store card details)
- Documents uploaded (rent agreements, identity documents)
Information collected automatically:
- Device type and browser information
- IP address and approximate location
- Usage data (pages visited, features used)
- Log data (errors, performance metrics)
3. How We Use Your Information
- To provide and improve the RentNivas service
- To authenticate your identity via OTP
- To send rent reminders and payment notifications via WhatsApp and email
- To generate rent receipts and agreements
- To process subscription payments via Razorpay
- To provide customer support
- To comply with legal obligations
- To detect and prevent fraud and abuse
4. Aadhaar Data
- Your Aadhaar number is transmitted directly to Signzy and UIDAI for authentication
- RentNivas does not store your Aadhaar number
- Only the last 4 digits may be stored for display purposes in signed documents
- The UIDAI transaction ID and timestamp are stored for audit trail purposes
5. Data Sharing
We do not sell your personal data. We share data only with:
- Supabase — database and authentication infrastructure (servers in Singapore)
- Twilio — WhatsApp and SMS messaging
- Razorpay — payment processing (RBI-licensed payment gateway)
- Signzy — Aadhaar eSign (UIDAI Licensed ASP)
- Resend — transactional email delivery
- Vercel — application hosting infrastructure
- Law enforcement — when required by applicable law
Between property owners and tenants: owners can see tenant information for properties they own. Tenants can see their own information and their landlord's contact details.
6. Data Storage and Security
- All data is stored on Supabase (PostgreSQL) with Row Level Security enabled
- All connections are encrypted with TLS/SSL (256-bit)
- Documents are stored in private Supabase Storage buckets
- Passwords are never stored — we use OTP-based authentication only
- API keys and secrets are stored as encrypted environment variables
- We conduct regular security reviews and access audits
7. Data Retention
- Account data: retained while your account is active
- Rent payment records: retained for 7 years (for tax/legal compliance)
- Signed agreements: retained for the duration of tenancy + 3 years
- WhatsApp message logs: retained for 90 days
- Upon account deletion: personal data deleted within 30 days, financial records retained as required by law
8. Your Rights
Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:
- Access — request a copy of your personal data
- Correction — request correction of inaccurate data
- Erasure — request deletion of your data (subject to legal retention requirements)
- Portability — request your data in a machine-readable format
- Grievance redressal — raise a complaint about data processing
To exercise any of these rights, contact us at support@rentnivas.in. We will respond within 30 days.
9. Cookies
10. Children's Privacy
11. Changes to This Policy
12. Grievance Officer
In accordance with the Information Technology Act, 2000 and applicable rules, the details of the Grievance Officer are:
Grievance Officer: RentNivas Support Team
Email: support@rentnivas.in
Website: rentnivas.in
Location: Bengaluru, Karnataka, India
Response time: Within 30 days of receiving the grievance