Skip to main content

Privacy policy

Last updated: 2026-05-31

Who we are

RentIntel (“we”, “us”, “our”) operates rentintel.net — a community-driven rental-property review platform for Australia. We are responsible for the personal information we hold about you and we comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

What information we collect

When you use RentIntel we may collect:

AccountEmail, password (hashed with bcrypt), display name (a pseudonym you choose)
OAuth (if you sign in with Google)Your Google account ID, basic profile info, an avatar URL, and refresh / access / id tokens from Google
Address linkageAustralian property addresses you search for or link to your account, the move-in and move-out dates you provide, and the Google Place ID for that property
ReviewsThe rating, free-text review body, sub-scores, and any photos you upload of properties you have lived in
Landlord claimsEvidence documents (title, lease, agency authority) you upload when claiming a property as a landlord
ActivityReactions (helpful / not helpful), flags / reports, and replies
TechnicalServer logs that record the page you requested, your IP address, the time of the request, and your user-agent string

Why we collect it (lawful basis)

Under the APPs we must have a clear purpose for each piece of information we collect. Our purposes are:

  • To create and operate your account (account + OAuth data).
  • To attribute reviews to a pseudonymous author so other users can judge credibility.
  • To anchor reviews to a specific property (address + place ID).
  • To verify that a landlord owns or manages a property before allowing them to reply (claim evidence).
  • To moderate content and detect abuse (flags, activity logs, server logs).
  • To send essential service emails (verification, password reset, takedown / moderation notices).

We will never sell your personal information. We do not use behavioural advertising cookies. Marketing emails are opt-in only and can be disabled from your account settings.

Who we share it with

RentIntel relies on a small number of third-party processors. Each one acts only on our instructions and has its own privacy posture:

Vercel (USA / global)Hosting + edge logs
Database host (Supabase or Railway, region: Sydney AU)Stores your account, addresses, and reviews
Google (USA)Address autocomplete + Places API, optional OAuth sign-in, Street View imagery
Cloudflare R2 (global)Storage for review photos and landlord-claim evidence
Resend (USA / EU)Transactional email delivery (verification, password reset, takedown notices)

Some of these providers store data outside Australia. By using RentIntel you consent to your personal information being processed in those jurisdictions, subject to the contractual safeguards we have in place with each provider.

How long we keep it (retention)

  • Account data — kept while your account is active. After you delete your account, identifying fields are anonymised within 30 days and your account is hard-deleted after 90 days.
  • Reviews and replies — kept for the lifetime of the platform once published, because other tenants rely on them. When you delete your account, your reviews remain published but the author becomes anonymous (“former tenant”).
  • Landlord-claim evidence — kept for as long as the claim is active plus 7 years after revocation (to satisfy our own record-keeping obligations and to defend against fraudulent-claim disputes).
  • Server logs — kept for 30 days, then automatically rotated and deleted.
  • OAuth tokens — refreshed on use; revoked when you disconnect Google or delete your account.

Your rights

Under the Australian Privacy Principles you can:

Access

Request a copy of the personal information we hold about you. Use /api/account/export or email us.

Correct

Update your display name, email, or any inaccurate information from your account page.

Delete

Permanently remove your account. Your reviews remain but are anonymised.

Complain

If you believe we have mishandled your data, contact us first. You can also complain to the OAIC.

We will respond to access and correction requests within 30 days. We do not charge a fee for reasonable requests.

Security

Passwords are hashed using bcrypt (salt rounds 12). Database connections are encrypted. We use HTTPS for all client traffic. Access to production data is limited to a small number of administrators. We will notify you and the Office of the Australian Information Commissioner (OAIC) of any data breach likely to result in serious harm.

Cookies and tracking

RentIntel uses session cookies that are strictly necessary for sign-in. We do not use third-party advertising cookies, cross-site trackers, or behavioural analytics. If we ever introduce optional analytics, we will update this policy and ask for your consent first.

Children

RentIntel is not directed at children under 16. If you believe a minor has signed up, contact us and we will delete the account.

Defamation and third-party information

Reviews are user-generated content. They may mention landlords, agents, or tradespeople. We display landlords as “Property Owner” rather than by name, and we operate a notice-and-takedown process described in our Terms of Use. If a review names you personally and you believe it is inaccurate or defamatory, email privacy@rentintel.net and we will assess it.

Changes to this policy

We will update this page when our practices change. Material changes will be notified by email to active users at least 14 days before they take effect.

Contact us

Privacy enquiries

Email us at privacy@rentintel.net. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).