Privacy Policy

RentyFind is an AI-powered rental property search platform based in London, United Kingdom. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our service at rentyfind.com.

We are the data controller for the personal data described in this policy. We handle your data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

We collect the following categories of personal data:

• Account information: your name, email address, and optionally your phone number when you register
• Authentication data: password (stored encrypted) or sign-in provider information if you use a third-party sign-in option
• Search data: your property search queries, preferences, and conversation history within the platform
• Technical data: IP address, browser type, device type, operating system, referring page, approximate location derived from IP address, and similar technical identifiers collected automatically
• Usage and interaction data: how you navigate and interact with the Service, and error reports

We do not ask for special category data such as health, ethnicity, or religious belief. Please do not include information of that kind in your search queries or chat messages.

We use your personal data for the following purposes:

• To provide and operate the service, including processing property search requests, and to manage your account (performance of our contract with you)
• To send you property alerts via SMS where you have provided your phone number and opted in (your consent)
• To send you service emails about your account and search activity (performance of our contract with you)
• To send you newsletters and marketing about RentyFind (your consent, or our legitimate interest in marketing to existing customers). Every such email includes an unsubscribe link.
• To detect and prevent errors, crashes, and security incidents, and to keep the platform secure and reliable (our legitimate interest in operating a secure and functioning service)
• To measure how the service is used and to improve and develop features (your consent, see sections 5 and 6)
• To comply with legal obligations (compliance with a legal obligation)

Where we rely on your consent, you can withdraw it at any time and doing so is as easy as giving it. Withdrawal does not affect processing carried out beforehand.

RentyFind uses artificial intelligence to power the property search experience. When you submit a search query, your message is processed by a third-party AI service to generate property recommendations and responses. This processing is necessary for the core functionality of the platform.

We share only the content of your search queries with the AI service and do not share your name, email, or other identifying information as part of this process. The AI service is contractually bound to process this data only for the purpose of responding to your queries.

Analytics. We use third-party analytics services to understand how the service is used: which pages are viewed, which features are used, how visitors arrive, approximate location derived from IP address, and how visitors interact with pages.

Some of these services also use the data for their own purposes, including their own product improvement and advertising, and act as independent controllers in respect of that processing. Analytics is not necessary to deliver the service. Section 6 explains how to limit it.

Error monitoring. We use a third-party error monitoring service to identify and fix technical faults. It automatically collects technical information when an error occurs, including your IP address, device and browser information, and the actions that led to the error. This is used solely for diagnosing and resolving faults and is not used for advertising or profiling.

Cookies are small files stored on your device. Some of the technologies we use are not literally cookies but work the same way by storing or reading information on your device, and the same rules apply to them.

We use the following categories:

• Strictly necessary: required to sign you in, keep your session secure, and remember display preferences such as light or dark mode. Blocking these will prevent you from signing in.
• Analytics: used to measure how the service is used and how visitors interact with pages.
• Advertising: identifiers set by our analytics providers that they may recognise across their own sites and services.

You can block or delete cookies at any time through your browser settings, and our analytics providers offer their own opt-out tools. Access to RentyFind is never conditional on accepting non-essential cookies.

We do not sell your personal data. We share it with the following categories of third parties, only to the extent necessary:

• AI processing services: to generate property search responses
• Analytics services: to measure and improve how the platform is used
• Error monitoring services: to maintain platform reliability
• Authentication providers: if you sign in using a third-party provider
• Email and SMS providers: to deliver account emails, newsletters, and property alerts you have opted in to
• Hosting and infrastructure providers: who store and serve the platform on our behalf
• Property listing platforms: we aggregate publicly available listing data from third-party letting sites
• Legal authorities: where required by law or to protect the rights and safety of users

Most of these third parties act as our processors, handling your data on our instructions under the terms we have agreed with them. Our analytics providers additionally process some data for their own purposes and act as independent controllers in respect of that processing, governed by their own privacy notices. You can request the identity of any specific provider by contacting us.

Some of the providers we use may store or process your personal data outside the United Kingdom and the European Economic Area. Where that happens, we take steps to ensure your data receives a level of protection equivalent to that required under UK data protection law.

You can request details of the protections applied to a particular transfer by contacting us at [email protected].

We retain your account data for as long as your account is active. You may delete your account at any time from your profile settings.

What deletion removes. Deleting your account permanently removes your account record, your saved conversations and search history, and your sign-in activity log. This cannot be undone.

What deletion does not remove. Where you have submitted a viewing request or contacted us through the contact form, we keep the record of that request as a business record, but we strip your personal details out of it at the point you delete your account, so what remains is no longer linked to you. We also keep a minimal deletion record so that we can evidence the deletion and recognise if an account that was suspended attempts to re-register. That record contains no name, phone number, or readable email address, but it does contain a one-way cryptographic hash of your email address that can be matched against a future signup. It is automatically deleted after 12 months.

Other retention periods. Technical logs and error reports are kept for up to 90 days. Analytics data is kept for no longer than 14 months. Viewing requests and contact form submissions are stripped of personal details after 24 months.

As a UK resident, you have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data (you can also do this directly via your account settings). This right is not absolute: as set out in section 9, we retain a minimal pseudonymous deletion record containing a hashed email address for up to 12 months, and we retain viewing requests and contact submissions as business records with your personal details stripped out.
• Right to data portability: request your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests, and to direct marketing at any time
• Right to restrict processing: request that we limit how we process your data
• Right to withdraw consent: where we rely on your consent, withdraw it at any time by contacting us or by using the unsubscribe link in any marketing email

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Passwords are stored using industry-standard encryption. All data is transmitted over HTTPS.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will update the "last updated" date at the top of this page. Where changes are significant, we will bring them to your attention. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at [email protected].

If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.