Privacy Policy

1. What This Policy Covers

This Privacy Policy explains how RentWize collects, uses, stores, and protects personal information when you use our renter record-keeping service. RentWize processes information needed to provide the current product, including account access, property records, evidence storage, maintenance tracking, billing, support, security, and service reliability.

2. Information We Collect

• Account and contact data such as name, email address, password credentials, phone number if provided, and account status.
• Property and tenancy records such as address, lease dates, rent details, bond details, property manager details, notes, and condition records.
• Evidence and uploaded files such as photos, PDFs, notices, receipts, inspection documents, and correspondence you upload.
• Maintenance and communication records such as repair requests, repair timers, messages, follow-ups, and related notes.
• Billing metadata needed to manage subscriptions. Stripe processes payment details directly.
• Identity assurance records confirming the result of the mandatory Didit identity and age-over-18 check, together with a provider reference, status, consent, verification timestamps, and provider-deletion request state.
• Support and technical data such as support requests, device/browser information, service logs, error reports, and security events.

3. How We Use Information

• To provide, secure, and maintain RentWize.
• To store and organise your tenancy records and evidence.
• To process subscriptions and account changes.
• To send service, security, billing, and support communications.
• To diagnose bugs, monitor reliability, and protect against abuse.
• To meet legal, tax, accounting, security, and operational obligations.

4. Evidence and Sensitive Documents

RentWize is designed for tenancy records, not unnecessary sensitive-data storage. Only upload information that is genuinely useful for your tenancy record or requested through a secure product flow.

5. Third-Party Providers

RentWize uses providers to operate the Service. We share limited information only where needed for the relevant service.

• Clerk — authentication and session security.
• Convex — database, backend functions, and encrypted file storage hosted in Australia.
• Stripe — subscription billing and payment processing.
• PostHog — anonymous app, website and help-centre open counts processed in the EU. Events use fresh random identifiers and exclude page URLs, referrers, user identity and tenancy content. Profiles, automatic interaction capture and session replay are disabled.
• Sentry — US-hosted error diagnostics limited to generic error text and code locations. Visitor identities, request data, original error messages, and session recordings are excluded.
• Datadog — reliability, performance, security monitoring, and error diagnostics.
• Simple Analytics — privacy-focused aggregate website analytics.
• Google AdSense — advertising and ad quality checks on eligible non-auth surfaces where enabled.
• Maileroo — transactional email delivery.
• Didit — hosted identity and age-over-18 verification for every RentWize account. Didit processes identity documents and biometric material in its service; RentWize receives only the minimum decision needed to establish an assurance record and does not retain document images, selfies, raw provider decision payloads, document numbers, or full date of birth.

6. Storage, Security and Retention

We use security controls designed to protect personal information, including HTTPS/TLS in transit, access controls, and operational monitoring. Didit-hosted identity material is subject to Didit's deletion controls; RentWize requests provider deletion after a verification reaches a terminal result and records the request outcome. An accepted request is not represented as provider-side confirmation until the provider supplies confirmation.

We keep the minimum RentWize assurance record for as long as needed to provide the Service, meet legal/accounting/security obligations, resolve disputes, and maintain records. You can delete many records in-product or request account deletion and deletion of the remaining assurance record, subject to lawful retention requirements.

7. Your Choices and Requests

You may request access, correction, export, or deletion of personal information by contacting support@rentwize.com.au. Some information may need to be retained where required for billing, security, tax, legal, dispute, or compliance reasons.

8. Cookies and Analytics

RentWize uses essential cookies and similar technologies for authentication, session management, security, and service operation. We may use privacy-focused analytics, advertising tags on eligible non-auth surfaces, and telemetry to understand reliability and product issues. We do not sell personal information.

9. Contact

For privacy-related enquiries, contact support@rentwize.com.au.