Privacy Policy

1. Introduction

Rentify ("we," "us," "our") is committed to protecting the privacy and personal data of all individuals who interact with Rentify Earn, our AI-powered property portfolio management platform available at earn.gorentify.com.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use the Platform, and describes your rights under applicable UAE law — including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).

By using Rentify Earn, you acknowledge that you have read and understood this Privacy Policy.

2. Who This Policy Applies To

This Privacy Policy applies to:

• Users (Landlords / Asset Managers): Individuals or organisations who register for and use Rentify Earn to manage their property portfolios
• Tenant Data Subjects: Individuals whose personal data is uploaded to the Platform by landlords in the course of property management (e.g., tenant names, Emirates IDs, passport details). If you are a tenant whose data has been uploaded to Rentify Earn by your landlord, this Policy also describes how we handle your data

3. Data Controller

For the purposes of applicable data protection law:

Rentify is the data controller in respect of personal data of registered Users (landlords and their authorised staff).

Rentify acts as a data processor in respect of personal data of tenants uploaded to the Platform by landlords. The landlord (as data controller) is responsible for ensuring they have a lawful basis for sharing tenant personal data with the Platform.

4. Personal Data We Collect

4.1 Data You Provide Directly (User Account Data)

When you register and use the Platform, we collect:

4.2 Data You Upload to the Platform (Portfolio & Tenant Data)

When you upload files, documents, or records to Rentify Earn, the Platform may process:

Note: You are responsible for ensuring you have lawful authority to upload tenant personal data to the Platform. See our Terms and Conditions, Section 6.2.

4.3 Data Collected Automatically (Technical Data)

When you use the Platform, we automatically collect:

5. How We Use Your Personal Data

5.1 User Account Data

5.2 Uploaded Portfolio and Tenant Data

We do not use tenant personal data uploaded by you for any purpose other than providing the Service to you. We do not sell, share for advertising, or use uploaded tenant data to train general AI models.

6. AI Processing and Data

6.1 How AI Uses Your Data

Rentify Earn uses AI models to:

• Read and parse uploaded files
• Extract and classify fields (names, dates, amounts, document types)
• Generate confidence scores for extracted values
• Map source columns to portfolio fields
• Provide natural-language answers about your portfolio

6.2 AI Model Training

Your uploaded personal data and portfolio content are not used to train external third-party AI models. AI processing is conducted within controlled environments subject to data processing agreements with our infrastructure and AI service providers.

6.3 Automated Decision-Making

Rentify Earn uses automated processing to suggest field mappings, flag validation issues, and classify documents. These automated suggestions are always subject to your review and confirmation before being applied. No legally significant decisions about you or your tenants are made solely by automated means without human review.

7. Data Sharing and Disclosure

We do not sell your personal data. We share personal data only in the following circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf and under our instruction, subject to strict data processing agreements. These include:

• Cloud infrastructure providers (hosting and storage)
• AI and machine learning API providers (document extraction and NLP)
• Payment processors (billing and subscription management)
• Analytics providers (aggregated usage analytics)
• Customer support tools (support ticket management)

We require all service providers to maintain appropriate security and confidentiality standards.

7.2 Legal Requirements

We may disclose personal data if required to do so by UAE law, court order, regulatory authority, or to protect the rights, safety, or property of Rentify, our users, or the public.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the successor entity. We will notify you of any such transfer and provide you with options in accordance with applicable law.

7.4 With Your Consent

We may share data for any other purpose with your explicit consent.

8. Data Retention

Following the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion subject to Section 9 and any overriding legal retention obligations.

9. Your Rights Under UAE PDPL

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you have the following rights:

How to Exercise Your Rights: Submit your request to support@gorentify.com. We will respond within 30 days of receipt. We may ask you to verify your identity before processing your request. We do not charge a fee for reasonable requests.

Tenant Data Subjects: If you are a tenant whose data was uploaded by a landlord, please contact us at support@gorentify.com. Where we act as data processor, we will direct your request to the relevant landlord (data controller) as appropriate and assist where we can.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between your browser and the Platform uses TLS (Transport Layer Security)
• Encryption at rest: Uploaded files and sensitive fields are encrypted at rest
• Access controls: Role-based access with multi-factor authentication for internal systems
• Token-based authentication: Access tokens are held in memory (not persistent storage) to reduce XSS exposure; refresh tokens are stored in HTTP-only cookies
• Audit logging: System access and data modification events are logged
• Vendor security requirements: All third-party processors are required to maintain equivalent security standards

No method of data transmission or storage is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security.

Data Breach Notification: In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant UAE authorities in accordance with the timelines required by the UAE PDPL.

11. Cookies and Tracking

11.1 What We Use

Rentify Earn uses the following types of cookies and local storage:

11.2 Managing Cookies

You can manage cookies through your browser settings. Disabling strictly necessary cookies may prevent the Service from functioning correctly.

12. Children's Privacy

Rentify Earn is not directed at or intended for use by individuals under the age of 21. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately at support@gorentify.com.

13. International Data Transfers

Rentify Earn may use service providers located outside the UAE (including in the EU, US, or other jurisdictions) for cloud hosting, AI processing, and support tools. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses
• Transfers to countries with equivalent data protection levels
• Service provider certifications and security standards

By using the Service, you consent to such transfers where necessary to provide the Service.

14. Third-Party Links

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of any third party.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. We will notify you of material changes by:

• Sending an email to your registered address, and/or
• Displaying a prominent notice on the Platform

Changes take effect on the date stated in the updated Policy. Your continued use of the Service after that date constitutes acceptance of the revised Policy. We recommend you review this page periodically.

16. Contact and Complaints

Contact Us

For any privacy-related questions, data subject requests, or concerns:

Complaints

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant UAE data protection authority. We encourage you to contact us first so we can try to resolve your concern directly.