Privacy Policy

Last updated: August 6, 2026

This Privacy Policy explains how Rentmark ("Rentmark," "we," "us," or "our"), operated by Alaa Kandil, collects, uses, shares, and protects information when you use rentmark.io and our property management software (the "Service").

1. Information we collect

We collect the following categories of information:

• Account information: name, email address, password (hashed by our authentication provider), and company/business name.
• Customer Data you provide: property addresses, tenant names and contact details, lease terms, rent amounts, payment records, maintenance requests, messages, and documents you upload or generate (e.g., leases, receipts, move-in/move-out checklists).
• Payment information: subscription and billing details. Card numbers are collected and processed directly by Stripe; we do not store full card numbers on our servers.
• Connected-service data: if you choose to connect it, bank transaction data via Stripe Financial Connections (for payment matching).
• Usage and device data: log data, IP address, browser type, and pages visited, collected automatically to operate and secure the Service.

2. How we use information

• To provide, maintain, and improve the Service (e.g., generating receipts, tracking rent payments, sending reminders);
• To process subscription payments and manage your account;
• To send transactional emails (confirmations, payment reminders, password resets) and, where permitted, product updates;
• To detect, prevent, and respond to fraud, abuse, or security incidents;
• To comply with legal obligations and enforce our Terms of Service.

3. Tenant data

If you are a landlord using Rentmark, you may enter information about your tenants into the Service. You are responsible for having the appropriate legal basis (e.g., the landlord-tenant relationship and applicable consent or notice) to provide that information to us, and for complying with applicable privacy and consumer-protection laws toward your tenants. We process tenant data only on your behalf, as your service provider, to operate the features you use.

4. Third parties we share data with

We share information with the following service providers, solely to operate the Service:

• Stripe — payment processing and subscription billing;
• Supabase — database hosting, file storage, and user authentication;
• Resend — transactional email delivery;
• Vercel — application hosting and infrastructure;
• Stripe Financial Connections — bank account connectivity for payment matching, when you use that feature;
• DocuSign — electronic signature of lease documents, when you use that feature (receives the lease document and signer names and email addresses);
• TransUnion SmartMove — tenant credit, background, and eviction screening, when you use that feature (the applicant provides their information directly to TransUnion).

We do not sell your personal information. We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of Rentmark, our users, or others.

5. Data retention

We retain account and Customer Data for as long as your account is active. When you delete your account, your data is deleted permanently as described in Section 8 below — we do not keep a copy afterward. Backups are rotated on a short cycle and overwritten in the ordinary course.

6. Data security

We use industry-standard safeguards, including encryption in transit (HTTPS), database access controls, and signed webhook verification for third-party integrations. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia, and others with consumer privacy laws), you may have the right to access, correct, delete, or export your personal information, or to opt out of certain uses. To exercise these rights, contact us at privacy@rentmark.io. We will respond within the time required by applicable law.

8. Account and data deletion

You can delete your account yourself, at any time, from within the app: go to Settings → Delete account. Deletion is immediate and permanent. It removes all of your Customer Data — properties, tenants, leases, payments, messages, and every document and file you uploaded or generated — cancels your subscription, and removes the portal access of tenants you invited. This cannot be undone.

If you prefer, you can instead request deletion by contacting privacy@rentmark.io, and we will delete your account and data on your behalf.

9. Browser extension

The Rentmark browser extension shows a read-only summary of your own portfolio in a side panel: rent collected this month, properties, tenants, overdue rent, open maintenance tickets and recent activity. It handles data as follows.

• What it reads. A single read-only endpoint on rentmark.io returns the summary above. The extension cannot create, change or delete anything in your account.
• What it stores. One value, on your own computer: the pairing token you obtain from your Rentmark account. Nothing else is stored, and the token never leaves your browser except to authenticate that one request to rentmark.io.
• What it never touches. The extension does not read the pages you visit, runs no script on them, and holds no permission for any site other than rentmark.io. It does not collect your browsing history, your location, or your activity on other sites.
• Where it sends data. Nowhere but rentmark.io. No analytics, no advertising, no third party receives anything from the extension.

You can disconnect at any time from the panel itself or by removing the extension, which deletes the stored token. The pairing also expires on its own after 90 days, and stops working immediately if your access to the account is removed.

10. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

11. International users

The Service is hosted in the United States and intended for landlords operating in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date above reflects the most recent revision.

13. Contact

Questions about this Privacy Policy or your data can be sent to privacy@rentmark.io.