Privacy Policy

• Account: name, email, phone number, profile photo, account type (individual or business).
• For business accounts additionally: company name, tax ID, and proof of business activity.
• Authentication: your password is stored only as a bcrypt hash — we cannot see it. If you sign in with Google, Google shares your name, email and profile photo with us.
• Listings: title, description, price, city and district, optionally an exact address and coordinates, and photos.
• Saved addresses you add to your profile.
• Conversations, reviews, and any reports you send.
• Technical data: listing view counts and the request IP address (used to rate-limit abuse).

On the map page, "Find near me" asks your browser for your coordinates. Those coordinates are never sent to our server — they stay in your own browser (localStorage) and are used only to centre the map around you and calculate distances.

To remove it, clear this site's browser data. If you decline location access the map still works — you just pick a city manually.

We use exactly two cookies, and both are functional:

• renthub_session — keeps you signed in. HttpOnly, so JavaScript cannot read it.
• rentlab_lang_v2 — remembers your chosen language for one year.

We have no advertising or tracking cookies.

• Creating your account and signing you in.
• Displaying and searching listings.
• Letting the two sides of a rental talk to each other.
• Verifying your email and phone, and resetting your password.
• Detecting fraud and rule-breaking.

• Public: your name, profile photo, active listings, reviews you have received, your verification badge, and a listing's city/district.
• Your phone number is visible only inside an active conversation — never on a public profile or a listing card.
• Your email is never public.
• A listing's exact coordinates appear on the map if you set them, so don't drop the pin exactly on your front door unless you want to.

We rely on these services to run the platform:

• Amazon S3 — stores listing and profile photos.
• An email provider — sends verification and password-reset messages.
• An SMS provider — sends the phone verification code.
• Google — only if you choose to sign in with Google.
• OpenStreetMap — map tiles load directly from your browser, so OpenStreetMap sees your IP address.

We do not sell your data and do not share it with third parties for advertising.

Traffic is encrypted with HTTPS. Passwords are stored as bcrypt hashes and session tokens are stored hashed as well. Nobody on our side can read your password.

We keep your data for as long as your account is active. You can delete a listing yourself at any time from your profile.

To delete your account entirely, contact us and we will process the request within a reasonable time. Note that the part of a conversation that belongs to the other party may be retained for dispute and abuse records.

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Contact us to do so — we may ask you to confirm your identity first so we don't hand someone else's data over.

The platform is not intended for anyone under 18, and we do not knowingly collect their data.

When we update this policy we change the date shown at the top of the page. For significant changes we will try to notify you separately.