Legal
Privacy Policy
This Privacy Policy explains how RentRemedy collects, uses, stores, and protects personal data when you use rentremedy.in and related services.
Last updated: 12 August 2026
This Privacy Policy explains how RentRemedy (“RentRemedy”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you use the website rentremedy.in and related services (the “Platform”).
We are committed to complying with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian data protection laws.
2. Personal Data We Collect
We may collect the following categories of personal data:
- Account information: name, email address, phone number (if provided), and hashed password.
- Review and Content data: text of Reviews, ratings, and any other information you choose to submit.
- Evidence: rental agreements, payment screenshots, chats, photographs, and other supporting documents (used only for internal verification and kept strictly private).
- Device and usage data: IP address, browser type, device identifiers, pages visited, and interaction data.
- Log files and analytics data: generated through Google Analytics.
- Communications: you send to us.
3. Purpose of Processing and Legal Basis
We process personal data for the following purposes and on the following bases under the DPDP Act:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your Account | Consent / Legitimate Use |
| Verifying and moderating Reviews and Evidence | Legitimate Use / Consent |
| Displaying Reviews (with anonymity options selected by you) | Consent |
| Operating, maintaining, and improving the Platform | Legitimate Use |
| Detecting and preventing fraud and abuse | Legitimate Use |
| Responding to your requests and providing support | Consent / Legitimate Use |
| Complying with legal obligations | Compliance with law |
1. Data Fiduciary
The Data Fiduciary responsible for processing your personal data is:
Prince Kumar Priyadarshi
Sole Proprietor, trading as RentRemedy
Contact for all privacy-related matters: contact@rentremedy.in
4. How Evidence Is Processed
4.1 Evidence is uploaded solely for internal manual verification of Reviews.
4.2 Evidence is never published or made publicly accessible on the Platform.
4.3 Evidence is stored on Amazon Web Services (AWS) infrastructure located in the ap-south-1 (Mumbai) region within India.
4.4 Access to Evidence is restricted to authorised personnel only on a need-to-know basis.
5. Cookies and Analytics
We use essential cookies (required for the Platform to function) and Google Analytics.
For full details, please see our separate Cookie Policy.
7. Data Retention
| Category of Data | Retention Period |
|---|---|
| Account data | Until you request deletion or the Account is deactivated |
| Published Reviews | Retained indefinitely (subject to successful deletion requests) |
| Rejected Reviews and associated Evidence | Retained indefinitely for fraud-prevention and audit purposes (subject to successful deletion requests) |
| Logs and analytics data | 60 days |
| Evidence | Retained indefinitely unless a valid deletion request is processed |
6. Third-Party Processors
We engage the following processors to help operate the Platform:
- Amazon Web Services (AWS) - hosting and storage (ap-south-1 Mumbai region)
- Brevo - email communications
- Google Analytics - usage analytics
- These processors are engaged under appropriate contractual safeguards and process data only on our instructions.
8. Your Rights under the DPDP Act
Subject to applicable law, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete personal data
- Request erasure of your personal data (Right to be Forgotten), including Evidence, subject to any legal retention requirements
- Withdraw consent where processing is based on consent
- Nominate another individual to exercise rights in case of your death or incapacity (as per rules notified under the DPDP Act)
9. How to Exercise Your Rights
To exercise any of the above rights, please email us at contact@rentremedy.in with the subject line “Data Subject Request”.
We will acknowledge receipt within 72 hours and aim to complete the request within 30 days (or such longer period as may be permitted under the DPDP Act and rules).
We may require reasonable identity verification before processing your request.
10. Data Security
We implement reasonable technical and organisational security measures, including:
- Access controls and restricted access to Evidence
- Encryption of data in transit
- Secure storage on AWS infrastructure within India
- No method of transmission or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
11. Children’s Privacy
The Platform is intended only for individuals aged 18 years and above. We do not knowingly collect personal data from children under 18.
12. International Transfers
We do not transfer personal data outside India. All processing currently occurs on infrastructure located within India (AWS ap-south-1 Mumbai region).
13. Changes to this Policy
We may update this Privacy Policy from time to time. The updated version will be posted on the Platform with a revised Last Updated date. Continued use of the Platform after changes constitutes acceptance of the revised Policy.
14. Contact and Grievance Redressal
For any privacy questions, data subject requests, or grievances, please contact:
Email: contact@rentremedy.in