Privacy policy

Rentally processes personal data in line with Kenya's Data Protection Act, 2019. This policy explains what we collect and why.

What we collect

• Account details: name, email, phone number and a hashed password.
• Workspace data that landlords add: properties, units, tenant names, contact details, ID and KRA PIN numbers, leases, invoices, payments, meter readings, maintenance requests and documents.
• Payment confirmations from Paystack and Whop. We never receive full card numbers.
• Technical data: IP address, device and browser type, used for security and fraud prevention.

Why we use it

• To run the service: invoices, receipts, reminders, the tenant portal and reports.
• To keep accounts secure and investigate misuse.
• To send service emails and SMS. Tenants and landlords can turn reminders off in their profile.

Who we share it with

Only the processors needed to run Rentally: hosting, email, SMS (Africa's Talking), WhatsApp messages (Meta), bot protection on public forms (Cloudflare Turnstile) and payments (Paystack, Whop). If you choose a language other than English, the page text is translated by Google Translate. We do not sell personal data.

How long we keep it

For as long as the workspace is active, then up to 90 days after closure, except financial records the law requires us to keep for longer.

Your rights

You can ask to see, correct, export or delete your personal data, or object to processing. Tenants should first contact their landlord, who controls their workspace data; we will help them respond.

Contact

To exercise your rights or ask a question, contact us.