Privacy Policy

Rentyx Enterprises (“we”, “us”, “our”) operates this website at rentyx.org and the Rentyx platform (“Platform”) available at app.rentyx.org. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use Rentyx. We are committed to protecting your privacy and handling your data with transparency and care.

Using the service does not, by itself, give consent to every use of personal data. We process information where necessary to provide a service you request, meet legal obligations, or pursue legitimate interests such as securing the service, subject to your rights. Where consent is needed, we ask for it separately and you may withdraw it.

Rentyx is responsible as a data controller for its own account administration, enquiries, billing and website operations. For tenant, property and other personal records managed on a firm's instructions, that firm generally acts as controller and Rentyx acts as its processor. Your manager or landlord may have a separate privacy notice. Contact us if you need help identifying the organisation responsible for your records.

1. Information We Collect

1.1 Information You Provide

When you register for and use Rentyx, you may provide us with the following types of personal information:

• Full name, email address, and phone number at the time of registration;
• Property details, unit information, and portfolio data you enter into the Platform;
• Tenant information you add on behalf of the tenants you manage;
• Payment and billing information. Card payments are processed securely via third-party payment providers, and we do not store your card details directly. We may store bank account details where needed for payouts, billing, or account operations, with application-level encryption applied to selected payout account fields. This does not mean every field or transaction record is encrypted separately;
• Communications and correspondence with our support or onboarding team.

1.2 Information Collected Automatically

When you access this website or the Platform, technical information may be collected as described below. Optional analytics on this marketing website starts only after you allow it (see Section 7):

• Device type, browser, operating system, and IP address;
• Pages visited, features used, click patterns, and session duration;
• Cookies and similar tracking technologies (see Section 7);
• Error logs, crash reports, and performance monitoring data.

1.3 Information from Third Parties

We may receive limited information from third-party services connected to the Platform. Payment processors may share transaction confirmation data to verify completed payments. If you connect third-party tools or integrations to your Rentyx account, we may receive relevant data from those services as authorised by you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and continuously improve the Rentyx platform and its features;
• To process subscription payments and manage your billing and account status;
• To send important service notifications including invoices, payment confirmations, lease alerts, and platform updates;
• To provide customer support and respond to your requests and enquiries;
• To analyse usage patterns and behaviour across the Platform in order to improve user experience and product development;
• To comply with applicable legal obligations, regulatory requirements, and lawful requests from authorities;
• To detect, investigate, and prevent fraud, abuse, security threats, and violations of our Terms of Service;
• To send product updates, feature announcements, and relevant communications. You may opt out of non-essential communications at any time by following the unsubscribe link in any email or by contacting us directly.

3. How We Share Your Information

We do not sell, rent, or trade your personal data to any third party. We do not share your information with advertisers, data brokers, or any party for commercial marketing purposes.

We may share your information only in the following limited circumstances:

• Service providers: We work with trusted third-party providers who assist us in operating the Platform, including cloud hosting, payment processing, SMS delivery, and email services. These providers access only the data necessary to perform their functions and we require appropriate contractual protections for processing personal data on our behalf;
• Legal obligations: We may disclose personal data to law enforcement agencies, regulators, or government authorities where required by applicable Nigerian law or a valid legal process;
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your data may be transferred to the successor entity. We will notify affected users via email or in-platform notification before any such transfer takes effect.

These services include Vercel for website hosting, Neon for the platform database, Cloudinary for uploaded files, Resend for email, Flutterwave for payment services, and PostHog for analytics. Where you use Copilot, the question and relevant context needed to answer it may be sent to an AI service provider such as Anthropic. Clicking a WhatsApp or Google Calendar link opens a service operated by that provider under its own privacy notice.

Service providers may process information outside Nigeria. International transfers must meet the safeguards required by applicable data protection law. Contact us for information about the providers involved in your workspace, their processing locations and the applicable safeguards; we do not promise that all records remain in Nigeria.

4. Data Storage and Security

We use cloud infrastructure and application controls to protect your information. Our safeguards include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers;
• Password hashing and application-level encryption for selected sensitive fields, including payout account numbers and two-factor authentication secrets;
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis;
• Regular internal security reviews and vulnerability assessments.

These safeguards are not end-to-end encryption. Authorised administrators and service providers with the necessary privileges may access information to operate and support the service. Ordinary profile details and operational records are not all encrypted individually. Read our Trust page for more context.

In the event of a data breach that affects your personal information, we will notify you and relevant regulatory authorities within 72 hours of becoming aware of the breach, under our notification commitment. Where a breach is likely to cause a high risk to your rights and freedoms, we will communicate with you immediately as required by the Nigeria Data Protection Act. While we take every reasonable precaution to protect your data, no system or transmission over the internet can be guaranteed to be completely secure. We cannot warrant absolute security, and you use the Platform at your own risk in this respect.

5. Data Retention

We retain your personal data for as long as your account remains active and for a period of 90 days following termination or deletion of your account. This retention window allows for data export and dispute resolution. Financial records, including transaction history and invoicing data, have a published retention period of at least 7 years. The applicable statutory obligation depends on the record; this is not a statement that Nigerian law imposes a single seven-year minimum on every type of financial record.

You may request deletion of your personal data at any time by contacting us at hello@rentyx.org. We will action deletion requests within 30 days, except where retention is required by law or is necessary to resolve an outstanding dispute or enforce our agreements.

Closing an account in settings archives access and can support restoration; it is not an immediate erasure of personal data. To request erasure, use the contact route above. We will explain any records that must be retained and why. A firm's shared tenancy and financial records may also involve other people's rights and legal obligations.

6. Your Rights

As a user of the Rentyx Platform, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you;
• Right to rectification: You may request that we correct any inaccurate or incomplete data;
• Right to erasure: You may request deletion of your personal data (“right to be forgotten”), subject to legal retention requirements;
• Right to object or restrict processing: You may object to or request that we limit certain types of data processing;
• Right to data portability: You may request that we provide your data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where our processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@rentyx.org. We aim to respond to all rights requests within 5 business days.

You may also lodge a complaint with the Nigeria Data Protection Commission. You do not have to waive that right to contact our support team.

7. Cookies and Website Analytics

Rentyx uses cookies and similar tracking technologies to operate and improve the Platform. We use the following types of cookies:

• Essential cookies: Required for core Platform functionality including session management, authentication, and security. These cannot be disabled without affecting your ability to use the Platform;
• Optional website analytics: If you allow it on this marketing website, PostHog and Vercel measure page visits, selected link clicks and performance. PostHog uses browser storage and a generated identifier; these records should not be treated as anonymous merely because they do not contain your name. Marketing website session recording is disabled. The Platform has separate product analytics, which may associate activity with your account and workspace.

On this marketing website, choose Essential only to browse without optional analytics. Your choice is stored in this browser and may be changed using Cookie preferences. Withdrawing permission stops future website analytics; it does not erase records already collected. Contact us to exercise your data rights. This preference applies to this website, not to third-party sites or your separate platform workspace.

You can also control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of some features within the Platform. For more information on managing cookies, refer to your browser's help documentation.

8. Children's Privacy

Rentyx is a professional platform intended for use by individuals aged 18 and over. We do not knowingly collect or solicit personal data from minors under the age of 18. If we become aware that personal data has been submitted by or on behalf of a minor without appropriate parental or guardian consent, we will take immediate steps to delete that information from our systems. If you believe a minor has provided us with personal data, please contact us at hello@rentyx.org.

9. Third-Party Links

The Platform may contain links to external websites, integrations, or services that are operated by third parties. These links are provided for your convenience and do not constitute an endorsement by Rentyx Enterprises. We have no control over, and are not responsible for, the content, privacy practices, or security of third-party websites. We encourage you to review the privacy policies of any third-party services you access through the Platform before providing them with any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. When we make material changes, we will notify you via email and/or an in-app notification at least 14 days before the changes take effect. The “last updated” date at the top of this page will always reflect the most recent revision.

Changes to this notice do not replace any consent that is required for a new purpose. Your data protection rights continue to apply whether or not you continue using the service.

11. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the laws of the Federal Republic of Nigeria. We process personal data in line with the Nigeria Data Protection Act 2023, which came into force on 12 June 2023 and is administered by the Nigeria Data Protection Commission (NDPC). It is the principal law governing the collection, processing and storage of personal data belonging to people in Nigeria. Where the earlier Nigeria Data Protection Regulation (NDPR) continues to apply as subsidiary regulation, we observe it as well. Where applicable, we also observe principles consistent with broader international data protection standards.

12. Contact Us

For any privacy-related questions, requests, or complaints, please contact our Data Controller:

Rentyx Enterprises, Data Controller
Email: hello@rentyx.org
WhatsApp: +234 812 407 0022
Address: Mercantile House, Ibeju Lekki, Lagos, Nigeria.
Website: rentyx.org
Platform: app.rentyx.org

We aim to respond to all privacy requests within 5 business days.