Privacy Policy

Rentwire is sold to property management companies, so responsibility is split into two roles:

• Management companies. When a company uses Rentwire to manage its properties, that company decides what information it collects about its tenants and why. The company is the data controller; Deucetek acts as its service provider (processor) and handles that data only to operate the platform on the company’s behalf.
• Deucetek. We are the controller for our own data — accounts we create, billing records, support requests, marketing enquiries, and website analytics.

If you are a tenant and want your information corrected or deleted, contact your management company first. If you contact us directly, we will pass the request to them and help them respond.

• Account details — name, email address, phone number, role, company, and an optional profile photo.
• Portfolio and lease records — property addresses, units, lease dates, and rent amounts entered by the management company.
• Payment records — invoice amounts, status, dates, payment method type, and the transaction identifiers our payment processor returns.
• Repair requests — the description, priority, status history, comment threads, and any photos or video attached.
• Technical data — IP address, browser and device information, and server logs generated when you use the service.
• Mobile push tokens — if you enable notifications, so we can send rent reminders and repair updates.
• Anonymous usage measurement — if you allow Performance cookies, the page you viewed, the site that referred you, and whether you are on a phone, tablet, or desktop. See section 7.

We do not store card numbers or bank account and routing numbers. Rent and subscription payments are processed by Stripe, and payment credentials are entered directly into Stripe’s systems. Our database holds only non-sensitive references — amount, status, and Stripe’s transaction IDs. Rentwire is a software platform, not a money transmitter, and does not hold your funds.

We also do not sell personal information, and we do not share it with advertisers.

• To provide the service — authenticate you, show your rent status, route repair requests, and send receipts.
• To process payments and keep an accurate financial record for the management company.
• To send transactional messages such as rent reminders, repair updates, and invite emails.
• To secure the platform — detect fraud and abuse, and investigate incidents.
• To meet legal, tax, and accounting obligations.
• To improve the product and, where you have agreed, to measure our marketing.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (operating the service), legitimate interests (security, product improvement), consent (optional cookies and marketing email), and compliance with legal obligations (financial records).

We use a small number of processors, each handling data only as needed to run the platform:

• Supabase — database, authentication, and file storage for repair photos and lease documents.
• Stripe — rent payments, payouts, subscription billing, and fraud screening.
• Vercel — application hosting and delivery.
• Resend — transactional email.
• Expo — mobile push notification delivery.

We may also disclose information when required by law, to enforce our terms, or as part of a merger or acquisition — in which case we will notify affected customers.

• Every database table enforces row-level security, so tenants can only read their own records and staff can only read records belonging to their own company.
• Tenant information is never exposed to our platform administrators through ordinary access. Support access requires a documented, time-limited impersonation session that is recorded in an audit log.
• Data is encrypted in transit and at rest, and payment-state changes are audit-logged.
• Privileged server credentials are never included in browser or mobile app bundles.

No system is perfectly secure, but if a breach affects your personal information we will notify you and the relevant authorities as required by law.

A cookie is a small file stored on your device. Rentwire sets only strictly necessary cookies — we run no advertising cookies and no third-party tracking scripts such as Google Analytics. The cookies in use are:

Our own analytics — no Google, no cookies

Instead of embedding a third-party analytics service, we measure traffic ourselves and keep the data in our own database. It is designed so we can see how many people visit without being able to identify anyone:

• We record only the page path, the referring site’s hostname, and whether the screen is phone, tablet, or desktop sized.
• No cookie is set for analytics and your IP address is never stored. To count visitors we hash your IP and browser with a secret that is regenerated every day, then keep only the hash — so the value cannot be turned back into an IP, and you cannot be followed from one day to the next.
• Query strings are discarded and record identifiers in a URL are replaced with a placeholder, so invite links and tenant record ids are never recorded.
• The data is never shared, sold, or sent to any advertising network. Only Deucetek platform administrators can view the aggregate totals.
• Nothing is recorded at all unless you allow Performance cookies.

Strictly necessary cookies cannot be switched off, because the service cannot keep you signed in or process a payment safely without them. The Functional and Advertising categories are not used today; if we ever introduce them, your saved preference is honoured from the start.

You can change or withdraw your choices at any time: open your cookie settings. You can also clear or block cookies in your browser settings, though signing in will no longer work if you block necessary cookies.

We keep account and portfolio data for as long as the management company’s account is active. When an account closes, we delete or anonymise personal data within a reasonable period, except where we must retain it longer — most commonly financial and payment records, which tax and accounting rules generally require us to keep for several years. Audit and impersonation logs are retained as security records.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy.
• Correct information that is inaccurate or incomplete.
• Delete your information, subject to our legal retention obligations.
• Export your data in a portable format.
• Object to or restrict certain processing, and withdraw consent at any time.
• Be free from discrimination for exercising these rights.

To exercise a right, email support@deucetek.com. We will verify your identity before acting. Tenants should contact their management company first, as described in section 1. If you are in the EEA or UK you may also complain to your local data protection authority.

Rentwire is operated from the United States, and our service providers process data in the United States. If you use the service from outside the US, your information is transferred there and handled under this policy and appropriate safeguards, such as the standard contractual clauses our providers offer.

Rentwire is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the product changes. We will revise the “Last updated” date above and, for material changes, notify account holders by email or in the app. If a change adds a new category of cookie, the consent banner will ask you again.

Deucetek LLC — Rentwire
support@deucetek.com

See also our Terms of Service.