Privacy Policy

1. Introduction

RentPasa Inc. ("RentPasa," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, mobile applications, and services (collectively, the "Service").

Please read this Privacy Policy carefully. By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, do not use our Service.

This Privacy Policy is incorporated into and subject to our Terms of Use. Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in the Terms of Use.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, password, date of birth
• Profile Information: Profile photo, bio, verification documents, business information
• Property Information: Property details, photos, descriptions, pricing, availability
• Booking Information: Booking dates, guest count, special requests, payment information
• Communication Data: Messages sent through our platform, support requests, feedback
• Identity Verification: Government-issued ID, business registration documents, tax information
• Payment Information: Payment card details (processed by third-party processors), billing address

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, device type, operating system, unique device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, search queries
• Location Data: General location (city, state, country) based on IP address or device settings
• Log Data: Access times, error logs, performance data, security events
• Cookies and Tracking: See Section 8 for detailed information about cookies

2.3 Information from Third Parties

We may receive information from third-party services:

• Payment Processors: Transaction status, payment method information
• Identity Verification Services: Verification results, background check information
• Social Media Platforms: If you connect your social media accounts
• Analytics Providers: Aggregated usage statistics and trends
• Public Records: Property ownership records, business registration information

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Create and manage your account
• Process and facilitate bookings and transactions
• Enable communication between Hosts and Guests
• Provide customer support and respond to inquiries
• Send service-related notifications and updates
• Verify user identities and prevent fraud

3.2 Legal and Compliance

• Comply with legal obligations and court orders
• Respond to law enforcement requests
• Enforce our Terms of Use and policies
• Protect our rights, property, and safety
• Investigate and prevent fraud, abuse, and illegal activity
• Comply with tax and regulatory requirements

3.3 Business Operations

• Improve and optimize our Service
• Conduct research and analytics
• Develop new features and services
• Personalize your experience
• Send marketing communications (with your consent)
• Monitor and analyze usage patterns

4. How We Share Your Information

We do not sell your personal information. We share your information only as described below:

4.1 With Other Users

• Hosts: Guests' names, booking details, and verification status
• Guests: Hosts' names, property information, and contact details
• Public Profiles: Information you choose to make public (name, profile photo, reviews)

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment processors (Stripe, PayPal, etc.)
• Cloud hosting and storage providers
• Email and messaging services
• Analytics and advertising platforms
• Identity verification services
• Customer support tools
• Legal and professional advisors

4.3 Legal Requirements

We may disclose information if required by law or in good faith belief that disclosure is necessary to:

• Comply with legal process, subpoenas, or court orders
• Respond to government requests
• Enforce our Terms of Use
• Protect rights, property, or safety
• Prevent or investigate fraud or illegal activity

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.5 With Your Consent

We may share your information in other ways with your explicit consent or at your direction.

5. Your Privacy Rights

5.1 General Rights

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

5.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information (subject to exceptions)
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Right to Correct: Request correction of inaccurate personal information

To exercise your California privacy rights, contact us at privacy@rentpasa.com or use our online request form. We will verify your identity before processing your request.

5.3 GDPR Rights (EU/UK Users)

If you are located in the European Union, United Kingdom, or other jurisdictions with similar data protection laws, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access (Article 15): Obtain confirmation of processing and access to your data
• Right to Rectification (Article 16): Correct inaccurate or incomplete data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Article 18): Limit how we process your data
• Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing (GDPR): We process your personal data based on:

• Contract performance (providing our Service)
• Legitimate interests (fraud prevention, security, business operations)
• Legal obligations (compliance with laws)
• Consent (marketing communications, optional features)

5.4 Other State Privacy Laws (US)

Residents of other US states with privacy laws (Virginia, Colorado, Connecticut, Utah, etc.) may have similar rights. Contact us to exercise your rights under applicable state laws.

5.5 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@rentpasa.com or use our online request form. We will respond to your request within the timeframes required by applicable law (typically 30-45 days, depending on your jurisdiction).

We may require verification of your identity before processing certain requests to protect your privacy and security.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication and access controls
• Regular security assessments and vulnerability testing
• Employee training on data protection
• Incident response procedures
• Regular backups and disaster recovery plans
• Compliance with industry security standards

However, no method of transmission over the Internet or electronic storage is 100% secure.While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

If we become aware of a security breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors we consider include:

• The nature and sensitivity of the information
• The purposes for which we process it
• Legal and regulatory requirements
• Statutes of limitations for potential claims
• Business and operational needs

Retention Periods:

• Account Information: Retained while your account is active and for 7 years after closure for legal compliance
• Transaction Records: Retained for 7 years for tax and legal purposes
• Communication Data: Retained for 2 years after last activity
• Marketing Data: Retained until you opt-out or withdraw consent
• Legal Holds: Information may be retained longer if subject to legal hold or investigation

When we no longer need your information, we will securely delete or anonymize it, except where retention is required by law.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect and store information about your use of our Service.

8.1 Types of Cookies

• Essential Cookies: Required for the Service to function (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our Service
• Advertising Cookies: Used to deliver relevant advertisements (with your consent)

8.2 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Service.

Do Not Track: Some browsers offer a "Do Not Track" feature. We do not currently respond to Do Not Track signals, but we respect your cookie preferences.

8.3 Third-Party Tracking

Third-party services (analytics, advertising) may use cookies and tracking technologies. We do not control these third-party tracking technologies. Please review their privacy policies for information about their practices.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

EU/UK Users: When we transfer your personal data outside the European Economic Area (EEA) or United Kingdom, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our servers are located.

10. Children's Privacy

COPPA Compliance (US): Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@rentpasa.com.

If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will delete such information promptly.

International: For users in jurisdictions with different age requirements (e.g., 16 in the EU under GDPR), we comply with applicable age restrictions and parental consent requirements.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or applications that are not owned or controlled by RentPasa. This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through our Service.

Third-Party Services We Use: We use various third-party services, including payment processors, cloud hosting providers, analytics services, and customer support tools. These services have their own privacy policies governing their use of your information.

12. Your Choices and Controls

You have several choices regarding your personal information:

• Account Settings: Update your profile information, privacy settings, and preferences
• Communication Preferences: Opt-out of marketing emails (unsubscribe links in emails)
• Cookie Preferences: Manage cookies through your browser settings
• Location Services: Control location sharing through device settings
• Profile Visibility: Control what information is visible to other users
• Account Deletion: Request deletion of your account and data

To exercise these choices, visit your account settings or contact us at privacy@rentpasa.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes
• Displaying a notice on our Service

Your continued use of our Service after changes become effective constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using our Service and may request deletion of your account.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

EU/UK Representative: If you are located in the EU or UK and wish to contact our EU representative regarding GDPR matters, please email gdpr@rentpasa.com.

Response Time: We will respond to your privacy inquiries within the timeframes required by applicable law (typically 30-45 days).

15. Additional Information

15.1 Data Controller

For purposes of GDPR and other applicable data protection laws, RentPasa Inc. is the data controller of your personal information.

15.2 Supervisory Authority

If you are located in the EU/UK, you have the right to lodge a complaint with your local data protection authority if you believe we have violated applicable data protection laws.

15.3 Automated Decision-Making

We may use automated decision-making, including profiling, for fraud prevention, risk assessment, and service personalization. You have the right to object to automated decision-making and request human review where applicable.

15.4 Sensitive Information

We do not intentionally collect sensitive personal information (such as race, religion, health information) unless required for identity verification or legal compliance. If you provide such information, you consent to our processing it for the stated purposes.

15.5 Business Information

For enterprise users, we may collect business information (tax ID, registration numbers, etc.). This information is processed for business verification and compliance purposes.