Privacy Policy

This policy explains how ZenRentIt LLC ("ZenRentIt", "we", "us") handles personal information when you use our service. It covers the website, the mobile app and anything else that links to this page.

1. What we collect

Information you give us

• Account: email address, first and last name, display name, password (stored only as a hash by our authentication provider), and profile photo if you upload one.
• Profile: your biography and anything else you choose to add.
• Listings: titles, descriptions, prices, photographs, and the pickup address you enter.
• Messages: the content of conversations with other members.
• Support: anything you send us, including evidence submitted in a damage claim.

Information collected automatically

• Technical: IP address, browser and device type, pages requested and timestamps, kept in server logs.
• Usage: which listings are viewed, so owners can see a view count. This is a counter on the listing, not a record of who looked.
• Cookies: see section 7.

Payment information

Card details are collected and stored by Stripe, not by us. We never receive or store your full card number. We receive a token, the last four digits, and the status of a payment.

2. Location — how we handle it specifically

This deserves its own section, because a rental marketplace could easily publish your home address and ours is built not to.

• When you list an item, you search for an address. We send that text to a geocoding service to turn it into coordinates.
• We store the exact coordinates and address separately, in a table only you can read. They are shared with a renter only once a booking is confirmed.
• The coordinates attached to the public listing are deliberately rounded to roughly a mile. That coarsened point is what appears in search results and on any map — the precise one is never published.
• The public area label is derived from the address with house numbers and postal codes removed. Your ZIP code is shown, because renters judge distance by it; the street is not.
• We do not collect continuous or background location from your device.

3. Why we use it

• To operate the service — create your account, publish listings, run search, deliver messages.
• To process payments, deposits and payouts.
• To decide damage claims under the resolution process in our Terms.
• To keep the service safe — prevent fraud, abuse and prohibited listings.
• To provide support and to send transactional email (booking confirmations, password resets). These are not marketing and you cannot opt out of them while holding an account.
• To meet legal, tax and accounting obligations.

Where the GDPR or similar law applies, our legal bases are: performance of a contract with you; our legitimate interests in operating and securing a marketplace; compliance with a legal obligation; and consent where we ask for it.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

4. Who else sees it

Other members

Your display name, photo, biography, join date and published listings are public. Your messages are visible to the member you are talking to. Your exact address is shared with a renter only after a booking is confirmed. Your email address is never shown to other members.

Service providers

These companies process data on our behalf, under contract:

• Supabase — Database, authentication and file metadata (United States).
• Cloudflare — Hosting, content delivery and image storage (R2) (Global edge network).
• Stripe — Payment processing, payouts and fraud checks (United States).
• OpenStreetMap (Nominatim) — Converting an address or ZIP code to coordinates (European Union).
• Google — Optional sign-in, if you use it (United States).

When you search by ZIP code, that ZIP code is sent to the geocoding service from our servers, not your browser — so your IP address is not disclosed to them.

Others

We may disclose information where required by law, to enforce our Terms, to protect the rights or safety of any person, or in connection with a merger, acquisition or sale of assets — in which case we will give notice before your information becomes subject to a different policy.

5. How long we keep it

• Account and profile: while your account is open, then up to 30 days after closure.
• Listings and photographs: until you delete them, subject to the point below.
• Messages and booking records: retained after account closure where needed to resolve a dispute, defend a claim or meet a legal obligation.
• Payment and tax records: as long as tax and financial law requires, typically seven years.
• Server logs: a rolling short retention period for security and debugging.

6. Your rights

Depending on where you live, you may have the right to:

• know what we hold about you, and get a copy;
• correct information that is wrong;
• delete your information, subject to the retention exceptions above;
• object to or restrict certain processing;
• receive your data in a portable format;
• withdraw consent where processing relies on it;
• not be discriminated against for exercising these rights.

Email privacy@zenrentit.com to make a request. We will verify your identity through your account before acting, and respond within the period the applicable law requires. You may use an authorised agent.

Some information cannot be deleted on request — for example, a message thread that is evidence in an open damage claim, or a payment record we are required to keep. We will tell you if that applies and why.

7. Cookies

We use a small number of cookies and similar storage, all of them functional:

• Authentication — keeps you signed in. Without it the service cannot work.
• Preferences — remembers your light or dark theme choice.
• Redirect — remembers where you were heading when asked to sign in.

We do not use advertising or cross-site tracking cookies. Blocking the authentication cookie will prevent you from signing in.

8. Security

Data is encrypted in transit. Passwords are hashed by our authentication provider and are not visible to us. Access to member data is restricted by database-level row security, so one member's account cannot read another's private data even if application code were wrong. Uploads are verified server-side before they are stored against your account.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects you we will notify you as required by law.

9. Children

The service is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact privacy@zenrentit.com and we will delete it.

10. International transfers

We are based in the United States and our providers operate there and elsewhere. If you are outside the United States, using the service means your information is transferred to and processed in countries whose data protection laws may differ from your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

11. Changes

We may update this policy. The date at the top shows when it last changed. Where a change is material we will give notice through the service or by email before it takes effect.

12. Contact

privacy@zenrentit.com
ZenRentIt LLC, [Registered address], Texas, United States