Privacy Policy — Renterah
1. Preamble
This privacy policy describes how Renterah collects, uses, retains and protects personal data in the context of using its web application accessible at renterah.ai (hereafter "the Service").
Renterah is an application that analyzes rental listings published on publicly accessible platforms, to help users identify potential scams before sending any money or documents.
We are committed to processing your data transparently, in strict compliance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and French law n° 78-17 of January 6, 1978 as amended.
2. Data controller
The data controller is:
ZEGUILD
Simplified joint-stock company (SAS)
Registered office: 10 Rue de Penthièvre, 75008 Paris, France
SIREN: 930 339 262
Contact: contact@renterah.ai
For any question relating to this policy or to exercise your rights, you can write to the email address above.
3. Data we collect
3.1 Data received via Google at sign-in
Registration and login to Renterah are performed exclusively via Google Sign-In. We do not create or manage any password. You authenticate with Google, then Google transmits to us the information strictly necessary to create your Renterah account.
The data received from Google is limited to:
- Your email address, used as a unique identifier for your account and to send service communications.
- A unique Google identifier ("sub"), used technically to recognize you on subsequent logins.
We never receive your Google password. The authentication process is fully managed by Google.
We do not ask Google for any other information: no name, no profile picture, no contact list, no other data associated with your Google account.
3.2 Data you provide while using the Service
- The listing URLs you submit for analysis, kept in your scan history so you can revisit your past reports.
- The landlord's email address you provide optionally, when communicated by the landlord in private messages.
- Your feedback on the analysis reports, when you choose to tell us whether a verdict was correct or not.
3.3 Data collected automatically while using the Service
- Technical connection data: IP address, browser type, operating system, login dates and times, session duration.
- Payment data: when you buy credits, the payment is processed by our provider Stripe. Renterah does not store any banking data.
3.4 Data collected from public sources
To analyze a listing you submit, Renterah collects exclusively data freely accessible to the public on the Internet:
- The public content of the listing you submit (text, price, photos, contact info shown publicly).
- Matching listings published on other public rental platforms.
- Public information about the landlord that our automated searches may identify on freely accessible sources.
Renterah does not collect any private, paid, or authentication-protected information.
4. Data we do not collect
As a commitment to transparency, here's what Renterah never collects:
- No passwords (authentication is fully delegated to Google).
- No banking data or payment card numbers.
- No identity documents.
- No health data or sensitive data within the meaning of article 9 of the GDPR.
- No precise geolocation data.
- No content of your private communications with a landlord.
- No biometric data.
- No name, first name, profile picture, or other personal information associated with your Google account (beyond your email address and Google technical identifier).
- No data concerning minors: the Service is exclusively for adults.
5. Purposes of processing and legal bases
In accordance with article 6 of the GDPR, each processing operation is based on a specific legal basis:
| Purpose | Legal basis |
|---|---|
| Creation and management of your user account | Contract performance (art. 6.1.b GDPR) |
| Authentication via Google Sign-In | Contract performance (art. 6.1.b GDPR) |
| Sending service notifications | Contract performance (art. 6.1.b GDPR) |
| Processing payments and keeping accounting records | Legal obligation (art. 6.1.c GDPR) |
| Listing analysis and research on public sources | Contract performance (art. 6.1.b GDPR) |
| Service security and fraud prevention | Legitimate interest (art. 6.1.f GDPR) |
| Service improvement and anonymized statistics | Legitimate interest (art. 6.1.f GDPR) |
| Marketing communications | Consent (art. 6.1.a GDPR), revocable at any time |
6. Data retention period
| Type of data | Retention period |
|---|---|
| Active user account | For the entire duration of your account |
| Deleted user account | Data erased within 30 days, except where required by law |
| Scan history | For the entire duration of your account, unless deletion is requested |
| Data extracted from analyzed public listings | Kept for forensic and statistical purposes, after anonymization |
| Payment data (accounting records) | 10 years per French accounting obligations |
| Technical connection data (logs) | 12 months maximum |
| Customer service communications | 3 years from last contact |
After these periods, your data is either deleted or irreversibly anonymized.
7. Data recipients
Your data is accessible only to authorized personnel within ZEGUILD, and to technical processors strictly necessary for the operation of the Service.
7.1 Technical processors
- Google LLC (authentication via Google Sign-In)
- Microsoft Azure (application hosting and database) — European Union
- Cloudflare R2 (image storage)
- Stripe (payment processing)
- Postmark (transactional emails)
- Anthropic (AI analysis)
- Sightengine (AI-generated image detection)
- Hunter.io (email verification)
- Parallel AI (multi-platform research)
- Firecrawl (public content collection)
Some of these providers may process data outside the European Union. When this happens, the transfer is framed by Standard Contractual Clauses adopted by the European Commission.
7.2 No data resale
Renterah does not sell, rent, or share your personal data with third parties for commercial purposes.
7.3 Communication to authorities
Your data may be communicated to competent judicial or administrative authorities in the context of a legal procedure.
8. Your rights
In accordance with articles 15 to 22 of the GDPR, you have the following rights over your personal data:
- Right of access: obtain a copy of your data.
- Right of rectification: correct inaccurate data.
- Right to erasure ("right to be forgotten").
- Right to restriction of processing.
- Right to object.
- Right to data portability.
- Right to withdraw your consent at any time.
- Right to give directives regarding the fate of your data after death.
How to exercise your rights
Write to us at contact@renterah.ai. We respond within a maximum of one month, per article 12 of the GDPR.
Right to complain
You can file a complaint with the French Data Protection Authority (CNIL): 3 Place de Fontenoy — TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
9. Data security
ZEGUILD implements appropriate technical and organizational measures to protect your data:
- Authentication delegated to Google.
- TLS (HTTPS) encryption.
- Encryption of sensitive data at rest.
- Strict access controls based on least privilege.
- Logging and monitoring of access.
- Regular encrypted backups.
10. Cookies and similar technologies
Renterah uses a limited number of cookies, strictly necessary for operation of the Service:
- Session cookies.
- Security cookies protecting against CSRF attacks.
- Preference cookies (language, etc.).
We use no advertising cookies, no third-party tracking cookies, and no marketing profiling cookies.
11. About landlord data identified during analyses
Renterah analyzes exclusively publicly published listings. When these contain landlord contact info, this information is processed under the legitimate interest of fraud prevention (art. 6.1.f of the GDPR).
Any landlord can exercise GDPR rights by writing to contact@renterah.ai.
12. Changes to this policy
This policy may be modified at any time. In case of substantial modification, you will be informed by email at least 30 days before the changes take effect.
13. Contact
ZEGUILD
10 Rue de Penthièvre
75008 Paris, France
E-mail: contact@renterah.ai