ComplyRent ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management and compliance tracking service.

Personal Information

We collect the following personal information:

• Email addresses (for account authentication and communication)
• Names (first and last name for users, tenants, and landlords)
• Phone numbers (optional, for landlord contact information)
• Physical addresses (for properties and landlord records)
• Passwords (stored securely using bcrypt hashing)

Property and Inspection Data

• Property details (names, descriptions, room configurations)
• Inspection records and notes
• Room inspection photographs
• Contract and tenancy information

Technical Information

• IP addresses (collected during login sessions)
• Browser user agent information
• Browser timezone (via cookies)
• Session data for authentication

We use the collected information for the following purposes:

• Providing and maintaining our property management service
• Authenticating users and managing sessions
• Sending password reset emails when requested
• Generating and sending inspection reports
• Improving our service and user experience
• Complying with legal obligations

Infrastructure Providers

Your data is processed and stored using the following third-party services:

Security Measures

• All data transmitted over HTTPS with TLS encryption
• Passwords hashed using bcrypt (never stored in plain text)
• Session cookies marked as httponly and same-site
• Rate limiting on authentication endpoints
• Sensitive parameters filtered from application logs

We use the following cookies:

We do not sell your personal information. We share data only in the following circumstances:

• With infrastructure providers listed above (necessary for service operation)
• Between landlords and their authorized users within the same organization
• When required by law or to respond to legal process
• To protect our rights, privacy, safety, or property

We retain your data as follows:

• Account data: retained while your account is active
• Inspection records and images: retained indefinitely for compliance purposes
• Session data (IP addresses, user agents): retained while sessions are active
• Upon account deletion request: data is removed within 30 days

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, please contact us at the email address provided below.

Your data may be transferred to and processed in countries other than your own, including the United States where our infrastructure providers operate. By using our service, you consent to such transfers.

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy, please contact us:

Email: support@complyrent.com