Privacy Policy

RentKollect ("we", "our", "us") is a brand operated by Ramde Business Solutions LLP, a limited liability partnership registered in India (LLPIN: ACR-9891, GSTIN: 06ABMFR3856J1ZO). We operate the rentkollect.com website, a web dashboard, and a WhatsApp-first AI assistant ("Kolly") that helps PG / hostel / co-living owners manage their properties. This policy explains what personal data we collect, how we use it, and your rights under India's Digital Personal Data Protection Act 2023 and the EU GDPR (where applicable).

From property owners (our customers):

• Name, mobile number, email, city
• Property details (name, address, rooms, beds, photos you upload)
• Tenant records you create (name, phone, Aadhaar, rent, deposit)
• WhatsApp messages you send to Kolly, and our replies (stored as a conversation log)
• Payment transaction metadata (if/when Razorpay is enabled)

From tenants (via the self-onboarding link owners share):

• Name, date of birth, email, permanent address
• Emergency contact name and number
• Aadhaar number and uploaded Aadhaar front/back/selfie images
• IP address and timestamp at the moment of submitting the rental agreement

Automatically: Google Analytics 4 (G-C2X5GXCJ88) measures page visits. We don't use third-party advertising cookies.

• To provide the service — render your dashboard, run Kolly's AI replies, process rent/deposit records
• To share tenant data with the property owner who invited them (and with no-one else)
• To improve Kolly's intent parsing — we may use aggregated, anonymised conversation logs to fine-tune models. Your raw messages are never shared with third parties outside of the LLM provider processing them in real time (Anthropic Claude via Emergent)
• To send you product and transactional communications on WhatsApp / email

We do not sell your data. We share the minimum necessary with:

• Meta (WhatsApp Cloud API) — to deliver messages to/from you
• Anthropic / Google / OpenAI (via Emergent Universal Key) — to run Kolly's language understanding. Messages are sent in real time, not stored by the provider for training
• MongoDB Atlas — encrypted-at-rest database hosting in India region
• Google Analytics — page view analytics only (IP anonymised)
• Razorpay — when/if you make payments. Full PCI-DSS compliant

• Active owner accounts — for as long as you have an account
• Tenant records — as long as the owner's account is active + 3 years after tenant exit (needed for Indian rental / tax compliance)
• WhatsApp conversation logs — 90 days
• If you request deletion, we comply within 30 days (see §7)

• All traffic uses HTTPS/TLS 1.3
• Database encryption at rest (AES-256) and in transit
• Aadhaar images stored with strict access controls — only the property owner who invited the tenant can view them
• Employee access to production data is role-limited and audit-logged

Under DPDP 2023 / GDPR you have the right to:

• Access a copy of the data we hold on you
• Request correction of inaccurate data
• Request deletion ("right to be forgotten")
• Withdraw consent for WhatsApp / email communications (reply STOP or email us)
• Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, email privacy@rentkollect.com with your registered mobile number. We respond within 14 working days.

RentKollect is not intended for users under 18. We do not knowingly collect data from minors.

We'll notify you on WhatsApp and via banner on rentkollect.com if we make material changes. Continuing to use the service after the change means you accept the updated policy.