Privacy Policy

1.1 Account Information

When you register, we collect your name, email address, phone number, and role (customer or property owner). This information is necessary to create and manage your account.

1.2 Property & Transaction Data

Property owners provide listing details such as address, rent amount, property type, and images. When you make a payment through our platform, transaction details (amount, date, Razorpay order ID, payment ID) are stored. We do not store raw card numbers, CVV, or banking credentials — all sensitive payment data is handled exclusively by Razorpay.

1.3 Usage Data

We automatically collect log data including your IP address, browser type, device identifiers, pages visited, and timestamps. This helps us improve platform performance and detect abuse.

1.4 Cookies & Session Tokens

We use HTTP-only cookies to store authentication tokens (access_token, refresh_token). These cookies are not accessible via JavaScript and cannot be read by third-party scripts. We do not use tracking cookies for advertising purposes.

RentOhome uses Razorpay as its payment gateway. When you initiate a payment, you are interacting with Razorpay's secure checkout. We receive only the outcome of the transaction (success/failure, order ID, payment ID, amount) and never have access to your card details, UPI PIN, or net-banking credentials.

Razorpay is PCI-DSS compliant and independently processes and stores all sensitive financial data. By making a payment on our platform, you also agree to Razorpay's Privacy Policy available at razorpay.com/privacy.

4.1 With Other Users

When a customer sends an enquiry or schedules a visit, your name, contact number, and message are shared with the relevant property owner. When an owner lists a property, their name is visible to customers browsing listings.

4.2 With Service Providers

We share data with trusted service providers — Razorpay (payments), our cloud hosting provider, and email delivery services — solely to operate the platform. These providers are contractually bound to protect your data.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of RentOhome, our users, or the public.

4.4 No Sale of Data

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

Authentication tokens are stored in HTTP-only, Secure, SameSite cookies — not in localStorage or sessionStorage. Passwords are hashed using bcrypt before storage. All data in transit is encrypted via HTTPS/TLS.

We implement login-attempt lockout (account locked after 3 consecutive failures) and rate limiting on all authentication endpoints to prevent brute-force attacks.

While we take reasonable technical measures to protect your data, no internet transmission is 100% secure. You are responsible for keeping your account credentials confidential.

We retain your account data for as long as your account is active. If you delete your account, we remove your personal profile data within 30 days. Transaction records may be retained for up to 7 years for legal and accounting compliance.

Property listings you post may be retained in our databases for audit purposes after deletion, in anonymised form.

RentOhome is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us: