Privacy Policy

RentSonar (“we,” “our,” “us”) respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

1. Information We Collect

Account details such as your name, email address, and login credentials.
Payment information when you subscribe to paid plans (handled securely by third-party providers).
Usage data such as IP address, browser type, and activity on our site for analytics and service improvement.

2. How We Use Your Information

To provide and improve our services.
To process payments and manage subscriptions.
To communicate with you regarding updates, support, or promotions.
To analyze usage and ensure platform security.

3. Data Sharing

We do not sell your personal data. We may share limited information with trusted service providers (e.g., payment processors, analytics tools) strictly for operating the platform.

4. Data Retention

We retain personal data only as long as necessary for providing services, complying with legal obligations, or resolving disputes.

5. Security

We implement industry-standard security measures to protect your data, but no system is 100% secure. Please keep your login credentials safe.

6. Your Rights

Access, update, or delete your personal data.
Request a copy of your data.
Opt-out of marketing communications at any time.

7. Third-Party Services

Our platform may link to or integrate with third-party services (such as Airbnb or Booking.com). We are not responsible for their privacy practices. Please review their policies separately.

8. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Continued use of the service after updates means you accept the revised policy.

9. Contact

If you have any questions about this Privacy Policy, contact us at:help@rentsonar.pl

10. Third-Party Services & Subprocessors

To operate RentSonar, we use selected third-party providers (“processors”) that may process limited personal data on our behalf. We enter into Data Processing Agreements (DPAs) with all processors and, where applicable, Standard Contractual Clauses (SCCs) for international transfers.

Provider	Purpose	Data Categories	Legal Basis (GDPR)	Region & Transfers	Retention
Vercel	App hosting, CDN, security & access logs	IP address, user agent, request metadata	Art. 6(1)(b) contract (service delivery); Art. 6(1)(f) legitimate interests (security)	EU/US; SCCs where applicable	Logs typically 30–180 days (provider-specific)
MongoDB Atlas	Database hosting for app data	Account data (name/email), app usage records, customer content	Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests (reliability)	EU/US; SCCs where applicable, regional deployment configured by us	For account lifetime + limited archival; invoices/records as required by law
Stripe	Payments & subscription management	Name, email, billing info; card data handled directly by Stripe (PCI DSS)	Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation (tax/reporting)	EU/US; SCCs where applicable	As required by financial/tax law (typically up to 5–10 years)
Mapbox	Map tiles & geospatial services	IP address, tile requests, coarse location inferred from IP	Art. 6(1)(b) contract (core feature); Art. 6(1)(f) legitimate interests (performance)	EU/US; SCCs where applicable	Provider-specific log retention (short-term)
SMTP Provider (via Nodemailer)	Transactional emails (sign-in, receipts, notices)	Email address, message metadata, content	Art. 6(1)(b) contract; Art. 6(1)(f) legitimate interests (reliability)	Depends on provider (EU/US); SCCs where applicable	For the duration necessary to deliver messages + limited logs
Google Analytics (GA4)	Usage analytics (only with prior consent)	IP (truncated), device info, events	Art. 6(1)(a) consent (ePrivacy)	EU/US; SCCs where applicable	Provider-defined (aggregated reports)
Meta Pixel	Ads/retargeting (only with prior consent)	Online identifiers, events	Art. 6(1)(a) consent (ePrivacy)	EU/US; SCCs where applicable	Provider-defined

Legal Bases Summary

Contract – Art. 6(1)(b) GDPR: account creation, delivering the app, payments.
Legitimate interests – Art. 6(1)(f): security, fraud prevention, availability, performance.
Legal obligation – Art. 6(1)(c): billing, tax and accounting record-keeping.
Consent – Art. 6(1)(a): only for non-essential analytics/advertising (if enabled).

11. Local Storage

RentSonar uses browser local storage to save certain user preferences and cached data. This allows the platform to load faster and reduce the number of API requests. No tracking or marketing identifiers are stored in local storage.

Local storage data is stored only on your device and is not shared with third parties. You may clear this data at any time through your browser settings.