Privacy Policy

Last updated: June 2026

What we collect

  • Account data— your email address when you sign in with email or Google. We don't collect your name unless Google provides it.
  • Reports you create — the addresses, ZIP codes, and property details you submit to generate a rent estimate. These are saved to your account so you can return to them.
  • AI chat messages— every message you send in the “Ask about this report” panel, and the AI's replies, are saved and linked to the report they belong to.
  • AI usage statistics — for each AI call we log the model name and token count (input and output) for cost monitoring. No message content is stored in these logs — only the aggregate statistics.
  • Anonymous usage — if you run a report without an account, we save the ZIP code and property type for aggregate analysis. We do not link this to an identity.
  • Basic analytics — page views and general usage patterns via Plausible Analytics. Plausible is cookieless and does not track you across other websites.

Why we collect it

  • To provide the service — saved reports, chat history, and account management all require storing data.
  • To improve the product — chat messages help us understand how people use the AI feature and where it falls short. We review these in aggregate; we don't read individual conversations unless you report a problem.
  • To respond to support requests — if you email us, we need to be able to look at your account.

How long we keep it

  • AI chat messages are kept as long as the report they belong to exists. When you delete a report, its chat messages are deleted with it. When you delete your account, all your reports and their chats are deleted.
  • Account data is kept while your account is active.
  • Anonymous search data (ZIP + property type) is retained indefinitely for aggregate analysis only.

What we don't do

  • We don't sell your data to anyone.
  • We don't share your data with advertisers or ad networks.
  • We don't track you across other websites.
  • We don't store payment card details — Stripe handles all payments directly.

Third parties we use

  • Anthropic — powers the AI chat feature. Your chat messages are sent to Anthropic's API to generate responses.
  • Supabase — our database and authentication provider. Your account data and reports are stored in Supabase's hosted Postgres.
  • Rentcast — provides rental listing data used in estimates. We send ZIP codes and bedroom counts to Rentcast's API; no personal data is transmitted.
  • Plausible Analytics — cookieless, privacy-respecting page analytics. No cross-site tracking.
  • Vercel — hosts the application. Standard server logs (IP, user agent, request path) may be retained per Vercel's policies.
  • Stripe — handles payments for paid plans. We do not see or store card details.

Your rights

You can request a copy of the data we hold about you, or ask us to delete it, at any time. To delete your account and all associated data, go to Settings → Delete account. For other requests, email privacy@rentu.xyz.

We aim to respond to all privacy requests within 30 days.

Data attribution

Rent trend data on this site is provided by Zillow Group (ZORI — Zillow Observed Rent Index). Rental listing data is provided by Rentcast. HUD Fair Market Rents are published by the US Department of Housing and Urban Development and are in the public domain. Rentu is not affiliated with Zillow Group, HUD, or any government agency.

California residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Opt out of the sale of personal information — we do not sell personal data
  • Non-discrimination for exercising your privacy rights

To exercise these rights, email privacy@rentu.xyz. You can also delete your account directly from Settings.

EU / EEA visitors (GDPR)

If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right of access — request a copy of the data we hold about you
  • Right to rectification — ask us to correct inaccurate data
  • Right to erasure — ask us to delete your data
  • Right to data portability — receive your data in a machine-readable format (available via Settings → Download my data)
  • Right to object — object to processing based on legitimate interests

Our legal basis for processing your data is performance of a contract (providing the Service you signed up for) and legitimate interests (service improvement, abuse prevention). Contact privacy@rentu.xyz to exercise any of these rights.

Cookies

We use minimal cookies — one for authentication and one for anonymous usage counting. No tracking or advertising cookies. See our Cookie Policy for details.

Children and minors

Rentu is a real estate data tool designed for adults — landlords, investors, and renters making housing decisions. It is not directed at, designed for, or marketed to minors.

We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@rentu.xyz and we will delete it promptly.

We have no technical means to verify a user's age at sign-up. By using the Service, you represent that you are at least 13 years old. Users under 18 should have their parent or guardian review these terms before using the Service.

California (AB 2273 — Age-Appropriate Design Code)

The California Age-Appropriate Design Code applies to online services likely to be accessed by minors under 18. Rentu is a rent estimation tool for real estate purposes — it is not designed for or likely to be accessed by minors, and we do not engage in profiling, targeted advertising, or dark patterns with respect to any user. We do not use personal data to infer age or serve age-targeted content.

EU / EEA and UK (GDPR Article 8)

Under GDPR, the minimum age for a child to consent to data processing is set by each member state — typically 13 in most EU countries and in the UK. Below that age, a parent or guardian must provide consent on the child's behalf. Since Rentu is not directed at children and we do not knowingly provide the Service to anyone below the applicable age threshold in their country, we do not collect parental consent. If you are a parent and believe your child has used this Service, contact us at privacy@rentu.xyz.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you by email.

Contact

Questions? privacy@rentu.xyz