Privacy policy

Account data. Your name, email address and phone number. Agents also provide their CEA registration number, which we verify against the public CEA register at signup.

Tenancy records. The information users enter to manage tenancies: property addresses, rent and deposit amounts, tenancy dates, payment records, maintenance reports and photos, and generated documents such as tenancy agreements.

Data entered about you by someone else. An agent or landlord may enter a tenant's name and contact details to manage a tenancy. If that is you, this policy and your PDPA rights apply to that data too, whether or not you have a RentOwl account.

Payment data. Subscriptions are billed through Stripe. Your card details go to Stripe directly; we never see or store them. Rent itself never passes through RentOwl at all: it moves bank to bank via PayNow, and we only record its status.

Analytics. On this marketing site only, and only if you agree via the consent banner, we collect usage analytics: PostHog, hosted in the EU, and Google Analytics, which processes data in the United States. Neither is given your name or email, and we do not identify you to them. No analytics run inside the product itself, and declining changes nothing about how the site works. We do not use session recording.

We do not collect NRIC numbers. The one place an NRIC appears in our output is a blank line on a generated tenancy agreement, to be completed by hand at signing.

To provide the service: managing tenancies, generating the documents you ask for, tracking rent, and routing maintenance reports. To send transactional email such as rent reminders, invitations and account messages. To bill subscriptions. To keep an audit trail of actions taken in the product, which protects all parties in a dispute. We do not sell personal data, and we do not use it for advertising.

Some features use AI processing, for example assembling a tenancy agreement from our clause library or triaging a maintenance report. The data needed for those features is processed by our AI service provider solely to provide the feature, and AI output is always reviewable by the person responsible.

We use a small set of service providers to run RentOwl: cloud database and file hosting, web hosting, transactional email delivery, AI processing, and payment processing (Stripe). Each processes personal data only to provide its service to us. Analytics (PostHog, EU-hosted, and Google Analytics, US) run only with your consent, as above.

Account data is kept for the life of the account and purged 30 days after deletion. Tenancy records are kept for the retention period required of regulated estate agency work. Payment and audit records are kept for 7 years. Backups expire within 30 days. Full detail is in our retention schedule, and if you want it, ask.

You can ask what personal data we hold about you, ask us to correct it, or ask us to delete it. We respond to access and correction requests within 30 days. Deletion is real deletion, not a hidden flag, except where the law requires records to be kept (for example financial records and regulated transaction records).

To exercise any of these rights, email our Data Protection Officer at dpo@rentowl.sg.

If a data breach is assessed as notifiable, we notify the Personal Data Protection Commission within 3 calendar days and affected users within 3 business days, in plain language.

Logging in uses essential session cookies, which are required for the product to work. On the marketing site, two analytics tools set cookies to recognise a returning visit, but only after you agree via the consent banner: Google Analytics sets _ga and _ga_<id>, and PostHog sets ph_<project key>_posthog. PostHog also keeps the same identifier, and details of the current visit, in your browser's local and session storage. Each holds a random identifier rather than your name or email, and lasts up to two years unless you clear it. Decline and none of this is set, because nothing is loaded in the first place. No cookies are used for advertising. Your analytics consent choice is stored in your browser, not on our servers.

When this policy changes materially, we will say so on this page and, for account holders, by email. The date at the top is the date of the current version.