Privacy Policy

legal

This Privacy Policy describes how RENTFLY PRIVATE LIMITED collects, uses, shares and protects your personal data on the Rentfly platform, and the rights available to you under Indian data protection law.

1. Introduction & Scope

This Privacy Policy explains how RENTFLY PRIVATE LIMITED ("Rentfly", "we", "us"), a company incorporated in India with its registered office at RENTFLY PRIVATE LIMITED, Pune, Maharashtra, India, collects, uses, stores, discloses and protects your information when you access our website, mobile application or related services (collectively, the "Platform"). It applies to all users — tenants, owners, flatmate seekers, brokers and visitors — and is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. By using the Platform you consent to the practices described here. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

(a) Personal Information: name, mobile number, email address, profile photo, gender, occupation, government ID details submitted voluntarily for KYC, and authentication identifiers from Google or phone OTP sign-in. (b) Usage & Technical Data: device model, operating system, IP address, browser type, app version, language, approximate location (with permission), pages viewed, searches, clicks, session duration, crash logs and cookie identifiers. (c) Property & Listing Data: property address and locality, geo-coordinates, rent and deposit amounts, availability dates, amenities, floor and configuration details, photographs and videos you upload, and flatmate preferences. (d) Communications: in-app chat messages, enquiries, support tickets, feedback and any attachments you share. (e) Transaction Data: subscription plan, invoice history and payment status. Card and bank details are collected and processed directly by our PCI-DSS compliant payment partners; we do not store full card numbers.

3. Purpose of Data Processing

We process your data to: create and manage your account; verify your identity and phone number; publish, rank and moderate listings; enable search, filters, maps and neighbourhood insights; facilitate contact between tenants and owners; provide chat, notifications and customer support; process subscriptions and issue invoices; detect, prevent and investigate fraud, spam, duplicate or misleading listings; improve product performance through analytics and aggregated research; personalise recommendations; send service, transactional and (with consent) promotional communications; and comply with legal, regulatory, tax and law-enforcement obligations. We process data on the lawful bases of your consent, performance of a contract with you, our legitimate interests in operating a safe marketplace, and compliance with law.

4. Data Sharing & Third-Party Disclosure

We do not sell your personal data. We share it only: (a) with other users to the limited extent necessary — for example, an owner's masked or verified contact option is revealed to a verified tenant who initiates contact; (b) with service providers acting as processors under contract, including cloud hosting and database providers, media storage and delivery (Cloudinary), authentication providers (Google, Firebase), mapping and places providers (Google Maps Platform), analytics, communication and messaging tools, and payment gateways; (c) with professional advisors, auditors and insurers; (d) with law enforcement, courts, regulators or government agencies where required by valid legal process; (e) with an acquirer or successor entity in the event of a merger, restructuring, financing or sale of assets, subject to this Policy; and (f) with your explicit consent. Some providers may process data outside India; where this occurs, we require contractual safeguards consistent with Indian law.

5. Data Security Measures

We implement reasonable security practices proportionate to the sensitivity of the data, including TLS/HTTPS encryption in transit, encryption at rest, row-level security policies and least-privilege database access, hashed and tokenised credentials, OTP-based identity verification, restricted internal access on a need-to-know basis, audit logging, secure secret management with periodic credential rotation, EXIF stripping from uploaded images, and periodic security reviews and vulnerability scanning. No method of transmission or storage is completely secure; you are responsible for safeguarding your login credentials and OTPs. Rentfly will never ask you for your password, OTP, CVV or banking PIN. If we become aware of a breach affecting your personal data, we will notify you and the competent authority (including CERT-In) as required by law.

6. Your Rights

Subject to applicable Indian law, you may: access the personal data we hold about you; correct or update inaccurate or incomplete data (most fields are editable under Profile → Edit Profile); withdraw consent previously given, understanding that certain features may then be unavailable; request deletion of your account and associated personal data; object to or restrict certain processing; request portability of data you provided; nominate another individual to exercise your rights in the event of death or incapacity; and lodge a grievance with our Grievance Officer or the competent authority. To exercise these rights, email rentflyofficial@gmail.com from your registered email address. We will respond within the timelines prescribed by law, ordinarily within 30 days. We may retain limited data where required for legal, tax, accounting, fraud-prevention or dispute-resolution purposes.

7. Cookies and Tracking

We and our partners use cookies, local storage, SDKs and similar technologies for: strictly necessary purposes (session management, authentication, security); functional purposes (language, theme, saved filters and recently viewed listings); analytics (understanding feature usage and diagnosing errors); and, where enabled, measurement of marketing campaigns. You can block or delete cookies through your browser or device settings, and control advertising identifiers at the OS level; disabling strictly necessary cookies may prevent the Platform from functioning. We honour applicable browser signals where legally required.

8. Data Retention

We retain account and listing data for as long as your account remains active. Following account deletion, personal data is deleted or irreversibly anonymised within 90 days, except where a longer retention period is required by law (for example, financial and tax records), or where data is necessary to establish, exercise or defend legal claims, resolve disputes, or enforce our Terms. Aggregated or de-identified data that cannot reasonably identify you may be retained indefinitely.

9. Children's Privacy

The Platform is intended solely for users aged 18 years and above. We do not knowingly collect personal data from children. If we learn that we have collected such data, we will delete it promptly. Parents or guardians who believe a child has provided data may contact us at the address below.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are: Grievance Officer, RENTFLY PRIVATE LIMITED, RENTFLY PRIVATE LIMITED, Pune, Maharashtra, India. Email: supportrentfly@gmail.com. Complaints regarding privacy, data handling, objectionable content or misuse of the Platform will be acknowledged within 24 hours and resolved within 15 days of receipt. Please include your registered email or mobile number, a description of the issue, and any supporting evidence.

11. Changes to this Policy

We may update this Policy from time to time to reflect changes in law, technology or our services. The revised version will be posted on this page with an updated "Last Updated" date, and material changes will be notified in-app or by email. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

12. Contact Information

For privacy questions, data requests or general enquiries, write to rentflyofficial@gmail.com. For account, listing or technical support, write to supportrentfly@gmail.com. Postal correspondence may be addressed to RENTFLY PRIVATE LIMITED, RENTFLY PRIVATE LIMITED, Pune, Maharashtra, India. Effective date: 29 June 2026. Last updated: 29 June 2026.