Privacy Policy
How RentJinie collects, uses, stores and protects personal data, your rights under India's DPDP Act 2023, and how to contact us about privacy.
Last updated
This policy explains what personal data RentJinie collects, why we collect it, and what rights you have over it. It covers our website and the RentJinie platform.
We handle personal data in two different roles. For the account holders who sign up and use RentJinie, we are the data fiduciary (controller). For the customer records that a rental business stores inside its own account, that business is the fiduciary and we act as its processor — see our Data Processing Agreement.
What we collect
- Account data
- Your name, email address, mobile number, business name, GST number if you provide one, store name and city, and your password in hashed form. We need this to create and secure your account.
- Business data you enter
- Inventory items, bookings, payments, invoices and the customer records you create — which may include your customers' names, phone numbers, addresses and ID-proof documents you choose to capture.
- Usage and device data
- Log data such as IP address, browser or app version, pages accessed and timestamps. We use this for security, debugging and understanding aggregate usage.
- Support communications
- Messages you send us, including support tickets and email, and any attachments you include.
Why we use it
- To provide the Service — creating your organisation, running bookings, generating invoices and reports.
- To bill you for a paid plan and meet our tax and accounting obligations.
- To secure the platform, detect abuse and investigate incidents.
- To provide support and respond to your requests.
- To send service messages about outages, changes and billing. Marketing email is separate and you can opt out at any time.
- To improve the Service using aggregated or de-identified usage patterns.
Legal basis and consent
We process personal data on the basis of the consent you give when you create an account and provide information, and for the legitimate uses permitted under the Digital Personal Data Protection Act, 2023 — including performing our contract with you and complying with law.
Where you upload your own customers' personal data, you confirm you have a lawful basis and any notice or consent required to do so.
Who we share it with
We do not sell personal data. We share it only where necessary:
- Service providers who host, store, back up or deliver messages on our behalf, bound by confidentiality and data-protection obligations.
- Payment and tax intermediaries, to process subscription payments and issue invoices.
- Law enforcement or regulators, where we are legally required to disclose.
- An acquirer, in the event of a merger or acquisition — with notice to you and no reduction in protection.
Where data is stored
Platform data is hosted on infrastructure we select for security and reliability. Where any processing takes place outside India, we apply contractual safeguards consistent with Indian law and only transfer to jurisdictions not restricted by the Government of India.
How long we keep it
We keep account and business data for as long as your account is active. After you close your account we retain it for a limited grace period so it can be restored or exported, then delete or irreversibly anonymise it — except where we must keep records longer for tax, accounting or legal reasons.
Security
We use encryption in transit, hashed password storage, role-based access control and tenant isolation so that one organisation cannot see another's data. Access by our staff is limited to what is needed to run and support the Service.
No system is perfectly secure. If a breach affects your personal data we will notify you and the Data Protection Board of India as required by law.
Your rights
Under the DPDP Act, 2023 you may ask us to:
- Confirm what personal data of yours we process and get a summary of it.
- Correct or complete inaccurate or incomplete data.
- Erase personal data that is no longer needed for the purpose it was collected.
- Withdraw consent, where processing is based on consent. This does not affect processing already carried out.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.
Children
The Service is for businesses and is not directed at children. We do not knowingly collect personal data of a child. If you believe a child's data has been provided to us, contact us and we will delete it.
Cookies
Our website uses a small number of cookies and similar storage. See our Cookie Policy for what they are and how to control them.
Changes
We will post any change to this policy on this page and update the date above. Material changes will be notified through the Service or by email.