Privacy Policy
Last Updated: June 7, 2026
This Privacy Policy describes how Realstake Ventures Private Limited ("Rentley", "We", "Us", or "Our") collects, uses, and protects information in connection with the Rentley rental platform. This policy is framed in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the rules made thereunder. Under the DPDP Act, Realstake Ventures Private Limited acts as the Data Fiduciary, and you, as a user of the Service, are a Data Principal with respect to your personal data.
1. Overview
At Rentley, your privacy is not an afterthought. It is a core design principle. We collect only what is necessary to deliver a safe, efficient, and trustworthy rental experience. We do not sell your personal data to third parties.
By creating an account and using the Rentley platform, you acknowledge that you have read, understood, and agree to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
Identity & Contact Data
Your name, email address, phone number, and profile photo provided during account registration.
Verification Data (KYC)
Government-issued identifiers including Aadhaar and PAN details. Sensitive fields are stored in a fully encrypted (AES-256-GCM) and masked format, accessible only for authorized identity verification purposes.
Location Data
Geographic information (city, pin code, and optional device location) used to show you relevant listings and to accurately pin property locations on our map.
Profile & Preference Data
Lifestyle preferences, languages spoken, and interests that you add to your profile to enable better tenant-owner matching.
Usage & Device Data
Anonymised data such as browser type, IP address, pages visited, and session duration used to improve the performance and design of our platform.
Communication Data
Messages, inquiries, and walk-in requests made through the platform, retained to resolve disputes and improve our moderation capabilities.
System Activity Logs
Records of your interactions with the platform, including logins, page visits, and specific actions (like viewing a listing), used for security, fraud prevention, and platform optimization.
3. How We Use Your Data
- To Provide Services: Connecting tenants and property owners, enabling walk-in scheduling, and managing listings.
- Account Verification: Authenticating user identity to prevent fraud and maintain a safe community.
- Communication: Sending transaction alerts, OTPs, platform updates, and responses to your support requests via email or SMS.
- Platform Improvement: Analysing anonymised usage patterns to design better search algorithms, filter tools, and UI features.
- Legal Compliance: Fulfilling obligations under applicable Indian laws, including responding to lawful government or regulatory requests.
- Safety & Moderation: Investigating reports of policy violations, potential fraud, or harm to our users through detailed audit trails and activity monitoring.
4. Sharing of Information
We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:
- Between Users: Profile information (name, photo, languages) visible to property owners when you express interest in a listing, and vice versa.
- Service Providers: Trusted third-party vendors such as Neon (database), Cloudinary (media storage), and Resend (email delivery) who process data solely on our behalf and under strict data agreements.
- Legal Obligations: When required by law, a court order, or governmental authority under Indian law.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, with prior notice to you.
Cross-Border Data Storage: Some of our trusted service providers — including our database, media storage, and email delivery partners — may store or process personal data on servers located outside India. We take reasonable steps to ensure that any such transfer occurs only to providers who maintain adequate data protection standards and are bound by contractual confidentiality, security, and processing obligations consistent with the DPDP Act and applicable Indian law.
5. Data Security & Encryption
We implement industry-standard technical and organisational security measures, including TLS/SSL encryption in transit and session-based authentication (via Auth.js/NextAuth).
Identification (KYC) Protection
All sensitive identity data (including full Aadhaar and PAN response blobs) are protected by a dedicated AES-256-GCM encryption layer before persistence. This ensures that personally identifiable information (PII) remains unreadable to unauthorized parties. Furthermore, we store only masked iterations of government ID numbers in our primary searchable database.
Access to decrypted personal data is strictly restricted to authorized administrators on a need-to-know basis for verification purposes only.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g., financial records, dispute resolution logs) for the period mandated by applicable Indian regulations.
7. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct any inaccurate or incomplete data via your profile settings.
- Delete your account and associated personal data by contacting us at contact@rentley.in.
- Restrict certain processing activities by contacting our support team.
- Object to the processing of your data for marketing or profiling purposes.
To exercise any of these rights, please write to us at contact@rentley.in or to our Grievance Officer (see Section 10). We will acknowledge and respond within 30 days. If you remain unsatisfied with our response, you may escalate your grievance to the Data Protection Board of India as provided under the DPDP Act.
8. Cookies & Tracking
We use session cookies strictly necessary for authentication (via NextAuth) and to maintain your logged-in state. These cannot be disabled without affecting core functionality such as staying signed in.
With your consent, we also use Google Tag Manager (which may load Google Analytics) and the Meta (Facebook) Pixel to understand site usage and measure the effectiveness of our marketing. These load only after you click "Accept All" on our cookie banner. If you decline or have not yet made a choice, these trackers do not load and no data is shared with Google or Meta. Similarly, when you create an account, we send a server-side signup event to Meta's Conversions API only if you have accepted analytics cookies.
You can change your choice at any time from the Cookie Policy page, or by configuring your browser to decline cookies (which may affect core platform functionality such as staying signed in).
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, notify you via email or a prominent in-app notice at least 7 days before the change takes effect. Your continued use of the platform after such notification constitutes your acceptance of the revised policy.
10. Contact & Data Controller
Realstake Ventures Private Limited is the Data Controller for all personal data collected via the Rentley platform. For any privacy-related questions, requests, or concerns, please contact our legal team:
Realstake Ventures Private Limited
Email: contact@rentley.in
Phone: +91 81059 94009
Registered Office: Bangalore, Karnataka, India - 560001
Grievance Officer
In accordance with the Information Technology Act, 2000, the rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of the Grievance Officer are provided below. You may reach out to the Grievance Officer for any complaints or concerns regarding the processing of your personal data.
Puneeth N
Designation: Founder & CEO
Email: ceo@realstakeventures.com
Phone: +91 81059 94009
© 2026 Realstake Ventures Private Limited. All rights reserved.
Contact Support