Privacy Policy

Information we collect

• Accounts and profiles: email address, account identifier, email-confirmation status, display name, optional biography and profile photo, and account timestamps. Firebase Authentication handles passwords and sign-in.
• Housing content: private draft details and photos; published listing details, photos and seller information; listing status, edits and saved-listing identifiers. A listing can include an address, unit, rent, other costs and lease dates.
• Messages and safety: messages, participants, message dates, read state, account-saved message-email preferences, notification queue/acceptance metadata, blocks, reports, reported-content snapshots, private reviewer notes and moderation history.
• Billing and notices: selected plans, promotional eligibility, recurring-consent records, checkout/customer/subscription identifiers, payment status, renewal dates and notification records. Stripe collects payment-method details. Rent Leasy does not store raw card numbers or card security codes.
• Technical information: hosting and authentication services may process IP addresses, browser/device information, request times and diagnostic or security logs when you visit or use the service.

Test mode does not make personal information anonymous. Account details, photos and messages you enter can be real personal information even when payments are simulated.

How we use information

We use information to authenticate accounts, save drafts and profiles, display published listings, deliver messages, remember saved listings, operate test subscriptions, record consent, send service notices, investigate reports, prevent abuse and troubleshoot the service. We do not use private messages as public listing content.

Who can see what you share

Published listing details, photos and public seller information are visible to visitors. Avoid including sensitive information you do not want made public. Private drafts are restricted to your account through the app’s access controls. Other conversation participants can see messages and the sender information shown with them, and may independently copy or share them.

The operator and authorized service administrators can access information when reasonably needed for support, safety, maintenance or legal obligations. Reports expose the specific reported content to authorized reviewers. Messages are not end-to-end encrypted; do not treat them as confidential legal, financial or identity-document storage.

Service providers and other disclosures

Google/Firebase provides hosting, authentication, database and file storage. Stripe provides checkout and subscription/payment processing. Resend provides enabled service-email delivery. Google Fonts supplies website fonts and can receive your IP address and browser request information when fonts load. Providers process information under their own applicable terms and privacy notices.

We may disclose relevant information to comply with applicable legal obligations, protect people and service security, investigate fraud, or respond to a legitimate support request. We do not currently sell personal information, run behavioral advertising or share information for cross-context behavioral advertising.

Provider information: Google Privacy Policy, Stripe Privacy Policy and Resend Privacy Policy.

Browser storage and email

Firebase Authentication uses browser storage to maintain sign-in state. Display preferences such as theme, text size and reduced motion are saved in this browser on this device. Message-email preferences are saved to the account across devices. The site and providers may also use browser caching or other storage needed for service operation and security. We do not currently run a separate advertising or behavioral-analytics service. Clearing browser storage may sign you out.

Firebase sends account confirmation and password-reset emails. The current test system stores billing notices in a private test inbox; Resend delivery is limited to a selected test recipient. Optional unread-conversation email alerts can be enabled in Account settings, but current delivery is also limited to the selected test inbox. Alert emails contain a link to the private inbox and no message body or sender name. A queued alert is suppressed if the conversation is read, blocked or closed before delivery checks. You can turn off message alerts without turning off security or billing notices. Delivery to every customer is not enabled yet. We do not currently operate a marketing mailing list.

Retention, deletion and your choices

Privacy & account requests ↗

You can edit your profile and draft information, remove supported photos, remove saved listings, block members and cancel listing renewals using the available controls. Marking a listing rented or canceling renewal removes or limits public availability as described in the app; it does not erase account, message or billing history.

For access, correction, deletion or account closure, use the privacy and account request page linked above or email the contact below. Requests receive manual review; submission does not instantly delete data, close account access or cancel renewals. We may verify identity or authority before acting and will explain any request we cannot fulfill, subject to applicable law.

We retain information while needed to operate the account and service and for legitimate security, dispute-resolution, financial-record or legal purposes. The current test service has not adopted fixed retention periods for every category. We need to finalize that schedule before live billing. Daily Firestore backups are currently configured with seven-day retention, and Storage has seven-day soft delete. These settings do not cover every provider record, export or log; restoration requires reapplying closure/deletion restrictions. Other participants may retain their own message copies, and providers or backups may retain records beyond removal from the active app. Where applicable, additional privacy rights depend on your location and the law’s applicability; this policy does not limit those rights.

Message history after account closure

The confirmed administrator-managed closure process keeps shared messages available to the other participant while removing the closed account’s profile, displayed name, photo and profile links. A neutral “Closed account” label replaces the displayed identity. Message text may still identify its author, and limited internal identifiers may remain necessary for conversation integrity, access controls or justified safety records; this is not a promise of anonymization.

Closure requests require manual review. Confirmed admin closure actions can remove displayed identity while preserving shared message text; request submission alone performs no closure. Specific requests to remove message content must be assessed separately, including applicable rights and any documented retention reasons. Shared-message retention decisions remain subject to individual rights requests and documented reasons for keeping the records.

Security, location and children

We use access controls and provider security features to protect information, but no system can guarantee absolute security. Providers may process information in the United States and other countries where they operate. Our selected database location does not mean every service processes all data only in Utah or only in the United States.

The service is intended for adults 18 and older and is not directed to children under 13. Contact us if you believe a child has submitted information so we can investigate and address it.

Policy updates

These policies describe the current test service. The general retention schedule and live-payment practices must be finalized before real billing begins. Material changes to this privacy policy will be communicated appropriately; an update does not by itself authorize a new use that requires consent.

Contact

Contact Bryton Smith, operator of Rent Leasy, in Provo, Utah, United States, at brytonsmith13@gmail.com.