Privacy Policy
1. Who is responsible for your data
RentSniper (rentsniper.io) is a rental-listing alert service, operated duly by its founders. RentSniper, reachable at info@rentsniper.io, is the data controller responsible for the personal data described in this policy ("RentSniper," "we," "us," "our"). You can reach us about anything in this policy at info@rentsniper.io.
2. What we collect
Account data: your email address, via our identity provider Auth0, when you sign up or log in.
Search profile data: the cities, price ranges, room counts, and keywords you save to define what listings you want to be alerted about.
Notification preferences: currently just your email address, since email is our only alert channel at launch.
Usage and match data: which listings matched which of your search profiles, so we can show you your alert history.
Technical data: standard server logs (IP address, browser type, timestamps), generated automatically by any web service, kept for security and debugging.
Analytics data: if you accept analytics cookies, Google Analytics collects data about how you use the site (pages visited, general interactions). See our Cookie Policy for details - this only happens with your consent.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Creating and running your account, matching listings to your profiles, sending alerts | Performing our contract with you (Art. 6(1)(b) GDPR) |
| Security, fraud prevention, debugging | Our legitimate interest in keeping the Service working and safe (Art. 6(1)(f)) |
| Analytics (Google Analytics) | Your consent, collected via our cookie banner (Art. 6(1)(a)) |
4. Who we share it with
We use a small number of processors to run the Service:
- Auth0 - identity and authentication
- Railway - application and database hosting
- Resend - sending alert emails
- Google Analytics - site usage analytics, only with your consent
We don't sell your data, and we don't share it with landlords, agencies, or any third party for their own marketing.
5. International transfers
Some of the processors above may handle data outside the EEA, including in the United States. Where that happens, we rely on recognized transfer mechanisms - the EU-U.S. Data Privacy Framework where the processor is certified (this currently covers Google), or Standard Contractual Clauses otherwise.
6. How long we keep it
We keep your account and search profile data for as long as your account is active. If you delete your account, we delete this data within 30 days, except where we need to keep something longer for a legal reason (for example, financial records, once paid plans exist). Server logs are kept for a shorter period, typically a few weeks, for security purposes.
7. Your rights
Under GDPR, you can ask us to:
- Give you a copy of your data (access)
- Correct it if it's wrong (rectification)
- Delete it (erasure)
- Limit how we use it (restriction)
- Give you your data in a portable format (portability)
- Stop processing based on legitimate interest (objection)
- Withdraw consent for analytics at any time, without affecting past processing
To use any of these, email info@rentsniper.io. If you're not satisfied with our response, you can complain to Bulgaria's data protection authority, or the supervisory authority in your own EU country.
8. Where you are
RentSniper is used by people across Europe, the US, and elsewhere. This policy is written to GDPR's standard, which we apply to everyone who uses the Service regardless of location. If you're in a jurisdiction with its own specific privacy rights - for example, some US states - we'll build out specific disclosures for those as our user base and obligations grow. At our current stage, everyone gets the same protections described here.
9. Children
The Service isn't intended for anyone under 18, and we don't knowingly collect data from anyone under that age.
10. Changes to this policy
We'll update this policy as RentSniper develops - especially once our Bulgarian entity is registered and once paid plans launch. We'll update the date at the top when we do.