Rentarly Privacy Policy
Last updated 16 October 2026
Effective date: 16 October 2026
NeoClear Labs, a partnership firm ("Rentarly", "we", "us", "our") runs Rentarly, an online rent ledger for property owners in India, available at https://rentarly.com (the "Platform" or "Services").
This Privacy Policy is our notice under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and its rules. It explains what personal data we process, why, who we share it with, how long we keep it, and the rights you have. Under the DPDP Act, Rentarly acts as a Data Fiduciary for account data, and you are a Data Principal.
If you enter information about other people (for example tenants, co-owners or helpers), you confirm that you are authorised to share it with us and that you have told them, where required, that it will be held on Rentarly.
Read this policy together with our Terms of Use.
1. What Rentarly is
Rentarly helps property owners record and track properties, owners, tenants, rent and leave-and-licence agreements, rent payments, security deposits, expenses, property tax and TDS/GST figures. Tenants can be invited to a tenant portal to see their lease and record their own payments.
Rentarly is a software provider. We are not a landlord, tenant, broker, property manager, bank or payment processor, and we are not a party to any rental agreement.
Rent is not paid through Rentarly. We do not receive, hold, settle or transfer rent, deposits or other money between owners and tenants. Payments shown in Rentarly are records only.
Subscription fees (plans from ₹8,899 a year, after a 1-month free trial) are paid through a third-party payment gateway, Cashfree Payments India Pvt Ltd (cashfree.com). The gateway processes your card, UPI or netbanking details under its own privacy policy. We receive only the payment status, amount, date and reference, and we do not store full card numbers or UPI PINs.
2. Personal data we collect
A. Account data. Name, email address, sign-in identifiers, password (stored only as a hash where you use a Rentarly password) and account settings. Owners may add up to 4 helper accounts; we hold the helper's name and email.
B. Owner and property data. Owner names, PAN, ownership shares, property address, flat/shop/office number, property type, rent, deposit, due dates, lease dates, maintenance, property tax and expense records.
C. Tenant data. Tenant names, mobile numbers, email addresses, flat numbers, lease terms, rent and payment history, and other details the owner enters.
D. Documents. Rent or leave-and-licence agreements, property tax bills and payment proofs (PDFs, screenshots, photos) uploaded by owners or tenants. Upcoming feature (not yet active): tenants will be able to email payment proofs to rent@rentarly.com, a mailbox run by NeoClear Labs itself. When this goes live, we will also process the sender's email address and the message content.
E. Text extracted from documents. Text, amounts, dates, references and party details read from those documents, and a confidence score.
F. Technical data. Session cookies, IP address, browser and device information, and logs needed to keep the Service secure and working.
We do not knowingly ask for Aadhaar numbers, bank account passwords, card numbers or UPI PINs. Please do not upload them; if a document contains them, mask them first where you can.
3. How we collect it
- From you, when you sign up, enter details or upload documents.
- From an owner, about tenants, co-owners and properties.
- From tenants, through the tenant portal (and, once the feature is live, by emailing payment proofs to rent@rentarly.com).
- Automatically, through cookies and server logs when you use the Platform.
4. Why we use it (purposes)
We use personal data only to:
- create and run your account and sign you in;
- keep your rent ledger, agreements, payments, expenses and reports;
- read uploaded documents (and, once live, emailed payment proofs) automatically and suggest entries (see Section 6);
- match payments to tenants and, if the owner turns on auto-approve, record a payment as approved without manual review (for tenant uploads, only when the date was read and confidence is high);
- calculate figures such as TDS and GST for the owner's records;
- link tenants to their lease through an invite;
- send service messages (for example invites and account notices);
- provide support, prevent fraud and misuse, and keep the Platform secure;
- comply with law and enforce our Terms.
We do not sell personal data, and we do not use it for third-party advertising.
Rentarly does not currently send marketing messages, or any messages by WhatsApp or SMS. If we add WhatsApp reminders or marketing in a future version, we will ask for your separate opt-in consent first, and you will be able to opt out at any time.
5. Legal basis and consent
We process personal data on the basis of your consent, given when you sign up and use the Services, and for legitimate uses permitted under Section 7 of the DPDP Act (for example where you voluntarily provide data for a specific purpose, or where the law requires it).
Withdrawing consent. You can withdraw consent at any time by writing to the Grievance Officer (Section 15). Withdrawal is as easy as giving consent. It does not affect processing already done, and we may then be unable to provide some or all of the Services. We will stop processing and delete the data unless the law requires us to keep it.
6. Automated document reading (OpenAI)
To read agreements, tax bills and payment proofs, we send the document (or images of its pages) to OpenAI, L.L.C., through its API. OpenAI returns the text and fields, which we store in your account.
- We use OpenAI's standard API and send requests with storage turned off (
store: false). Under OpenAI's API policies, data sent through the API is not used to train its models by default, but OpenAI may keep it for a limited period to monitor for abuse, under OpenAI's own data retention policy. - OpenAI processes data outside India (mainly in the United States).
- Automated reading can be wrong. Owners should check suggested entries. Where auto-approve is turned on, the owner accepts that payments may be recorded without manual review.
7. Who we share data with
We share personal data only as needed to run the Services:
| Provider | Purpose | Location |
|---|---|---|
| Clerk, Inc. | Sign-up, sign-in and sessions | United States |
| OpenAI, L.L.C. | Reading uploaded documents | United States |
| Hostinger | Hosting the app, database and stored files | India |
| Cashfree Payments India Pvt Ltd | Collecting subscription fees | India |
We also share data:
- inside an account: owners, their helpers and linked tenants see the data the Platform shows them (a tenant sees only their own lease and payments);
- when the law requires it: with courts, regulators or law enforcement on a valid legal request;
- in a business transfer: if Rentarly is merged or sold, subject to this policy.
Our providers process data only on our instructions and under contract.
8. Data stored or processed outside India
Some providers (Clerk, OpenAI) process data outside India. We transfer data only to countries not restricted by the Central Government under Section 16 of the DPDP Act, and we use providers with appropriate security commitments. Our main database and stored files are hosted in India with Hostinger.
9. How we protect data
- PAN, mobile numbers and flat numbers are encrypted in our database with AES-256-GCM.
- Uploaded agreement files and payment proofs are encrypted with AES-256-GCM when stored.
- Other details, such as names, email addresses, property addresses, rent amounts and extracted document text, are not encrypted field by field. They are protected by access controls and can be seen only by the account they belong to.
- Data is sent over HTTPS. Sessions use secure cookies, and access is limited to authorised staff who need it.
- When email-based tracking goes live, emails to rent@rentarly.com will be checked for sender authentication (DMARC, or SPF and DKIM) to block spoofed senders. The rent@rentarly.com mailbox is run by NeoClear Labs itself.
No system is completely secure, and we cannot guarantee that data will never be accessed without authorisation. Keep your sign-in details private.
10. Personal data breach
If a personal data breach happens, we will notify the Data Protection Board of India and the affected Data Principals as required by the DPDP Act and its rules, describe what happened and its likely impact, and explain what we are doing about it.
11. Cookies
We use only cookies needed to sign you in and keep the Platform working, including Clerk's sign-in cookies and a Rentarly session cookie, plus a cookie that remembers which lease a tenant selected. We do not use advertising or third-party analytics cookies. If we add analytics in future, we will update this section first. If you block cookies, you will not be able to sign in.
12. How long we keep data
We keep personal data while your account is active and as long as needed for the purposes above. After you close your account or withdraw consent, we delete or anonymise your personal data within 6 months, unless the law requires us to keep it longer (for example tax or accounting records). Data in backups, and in the rent@rentarly.com mailbox once email tracking is live, is deleted within the same 6 months.
13. Your rights
Under the DPDP Act you have the right to:
- access a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
- correct, complete or update inaccurate or incomplete data;
- erase data that is no longer needed, unless the law requires us to keep it;
- withdraw consent (Section 5);
- have your grievances addressed (Section 15);
- nominate another person to exercise your rights if you die or become incapacitated.
Owners can edit and delete properties, tenants, agreements, payments and expenses themselves in the app. Self-service account deletion and data export are not available yet. Until they are, email support@rentarly.com to close your account, get a copy of your data, or make any other request. We may need to confirm your identity first.
Tenants and others whose data an owner entered: the owner controls that record. You may also contact us, and we will work with the owner to handle your request.
Data Principals also have duties under Section 15 of the DPDP Act, including not giving false information and not filing frivolous complaints.
14. Children
Rentarly is meant for adults. You must be at least 18 years old and hold a valid PAN to create an owner account. PAN is collected and stored encrypted, as described in Section 9. We do not knowingly process children's personal data. If an owner records a minor (for example as an occupant), the owner must have verifiable consent from the parent or lawful guardian.
15. Grievance Officer
Contact our Grievance Officer with any question, complaint or request about your personal data:
- Grievance Officer, NeoClear Labs
- Email: support@rentarly.com
- Address: NeoClear Labs, 2, Floor-0, Plot-90, 8, Manek Mahal, Veer Nariman Rd, Churchgate, Mumbai – 400020
We will acknowledge your complaint within 24 hours and resolve complaints about the website and Services within 15 days of receiving them, or sooner if applicable law requires.
Rentarly is not a party to dealings between owners and tenants, and we do not accept complaints about rent, deposits, payments or other disputes between them. Those must be settled between the parties. We do handle complaints about how we process your personal data on the Platform. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
16. Your responsibilities
You must have the authority to upload any data about other people, keep it accurate, and not upload data you are not allowed to share. As set out in our Terms of Use, you are responsible for claims that arise from data you upload without authority.
17. Liability
We take reasonable security measures, but we are not liable for losses caused only by events beyond our reasonable control, such as attacks on third-party services, compromised user credentials or insecure devices, or force majeure. Nothing in this policy limits any liability that cannot be limited by law.
18. Changes to this policy
We may update this policy. We will post the new version here and change the "Last updated" date. If the changes are significant, we will notify you by email or in the app and, where the law requires it, ask for your consent again.
19. Governing law
This policy is governed by the laws of India. Courts at Mumbai, Maharashtra have exclusive jurisdiction, subject to the powers of the Data Protection Board of India.
20. Contact us
NeoClear Labs (partnership firm)
Email: support@rentarly.com
Address: 2, Floor-0, Plot-90, 8, Manek Mahal, Veer Nariman Rd, Churchgate, Mumbai – 400020
Website: https://rentarly.com