Privacy Policy

• Account details. Your email address and a password, which is stored only as a hash by our authentication provider. If you sign in with Google, the name and email address Google shares with us.
• Portfolio data you enter. Property addresses, units, purchase prices, loan terms, taxes and insurance, market and contract rents, expenses, and tenant names and balances as you record them.
• Documents you upload. Owner statements from your property manager, as PDFs or images, and the ledger rows we extract from them.
• Billing details. Handled by Stripe. We store your Stripe customer and subscription identifiers, your plan, and the dates you have paid through. We never see or store card numbers.
• Technical data. Our hosting provider keeps short-lived server logs (IP address, browser, timestamps) for security and debugging. We run no analytics, advertising, or session-recording scripts.

• To run the product: compute your cash flow, reconcile statements against your ledger, and produce reports.
• To read uploaded statements into ledger rows using an AI model (see the next section).
• To bill you and to send transactional email: account confirmation, password resets, receipts, and payment problems.
• To notify ourselves when a new account is created, so we can help new customers get set up.
• To keep the service secure and to fix problems.

We do not sell personal information, we do not share it for advertising, and we do not use your data to train AI models, ours or anyone else’s.

When you upload an owner statement, its contents are sent to Anthropic’s API, which reads the document and returns structured ledger rows. Under Anthropic’s commercial terms, content sent to its API is not used to train its models. You review the extracted rows before they are committed to your ledger, and the original file stays in private storage that only your account can read.

Owner statements and your own entries can include tenant names, rent charges, and balances. You are responsible for having the right to upload and record that information. We process it only on your behalf and only to provide the service to you. We never contact tenants and never share tenant information with anyone other than the service providers below.

These companies process data for us so the product can run. All of them are located in the United States, which is where your data is stored and processed. If you use RentMetrics from outside the United States, you are sending your data there.

• Supabase: database, authentication, and file storage. Your data is stored in its US East region.
• Vercel: hosting for the website and the application.
• Stripe: payments, subscriptions, invoices, and sales tax.
• Anthropic: AI extraction of uploaded statements.
• RentCast: property details and market-rent estimates. We send it the property address you enter.
• Resend: transactional email.
• Pushover: sends us an internal notification, containing your email address, when a new account is created.
• Google: sign-in, if you choose to sign in with Google. We request only your email address and basic profile.

We may also disclose information if the law requires it, or to protect the rights and safety of our customers or the service. If RentMetrics is ever acquired or merged, your data would transfer to the new owner under this policy, and we would tell you first.

We may produce aggregated, de-identified statistics from across the service, such as typical maintenance costs per unit in a region. Those never identify you, your properties, or your tenants.

We use only the cookies needed to keep you signed in. There are no third-party analytics or advertising cookies, so there is nothing for a browser’s Do Not Track signal to switch off; we treat everyone as if it were on.

We keep your data for as long as your account exists. To delete your account, email info@rentmetrics.co from the address on the account. We will remove your account, portfolio, and uploaded documents within 30 days, and they will roll out of backups within a further 30 days. Billing records are retained as long as tax and accounting law requires, typically seven years.

• Access and export. Paid plans include export of your ledger. On any plan, email us and we will provide a copy of your data.
• Correction. You can edit anything you have entered directly in the product.
• Deletion. Described above.
• Email. Transactional email is part of the service. We do not send marketing email.

If you live in a state with privacy legislation, such as California or Colorado, you can exercise those rights by emailing us. We do not sell or share personal information, so there is nothing to opt out of.

Data is encrypted in transit and at rest by our providers. Each account’s data is isolated at the database layer with row-level security, uploaded statements live in a private bucket, and internal credentials are scoped to the least access needed. No system is perfectly secure. If a breach ever affects your data, we will tell you promptly by email, and we will notify regulators where the law requires it. If you believe your account has been compromised, email info@rentmetrics.co.

RentMetrics is for adults managing rental property. We do not knowingly collect information from anyone under 18.

We will post any changes here and update the date at the top. If a change materially affects how we handle your data, we will email you before it takes effect.

Questions about this policy or your data: info@rentmetrics.co.