Your home records are sensitive.

Information connected to your account and rental

RentSeal stores the email used to sign in; the rental, room, move-in, move-out and deposit details you enter; photos and documents you upload; damage notes, issues and updates; and generated evidence-pack records.

Evidence records also keep technical context such as the original filename, file type and size, checksum, source, server receipt time and a device capture time when one is available. This helps keep the original file connected to its record. It does not independently prove when or where an event happened.

How RentSeal uses the information

The information is used to run your account, organise rental records, store and display evidence, create comparisons and evidence packs, operate issue histories, and show the status of your rental.

Payment card details are entered in Stripe Checkout. RentSeal keeps the identifiers and status needed to confirm payment and activate or revoke Rental Protection; it does not receive a full card number through the checkout flow.

RentSeal emails you about your own account and records: sign-in links, payment confirmations, notices about a retention or move-out date, a confirmation that a deletion is scheduled, and — if you created an account and never added a rental — one reminder that the setup is unfinished. That reminder is sent once and never again. There is no marketing list and RentSeal does not sell or rent your address to anyone.

Private records and intentional sharing

Rental records are scoped to the signed-in account that owns them. Evidence and documents use private file access rather than open public URLs.

When you create a share link, a recipient can open the selected read-only record until the link expires or is revoked. If you provide a recipient email, RentSeal stores it to send and track that share. Opening or acknowledging a link is recorded; acknowledgement confirms access or receipt only, not agreement with the record.

Measuring how the site is used

RentSeal counts how many times each step of the site is reached — a page opened, a button pressed, the sign-in form shown, an email submitted, a setup screen reached, a rental created — so we can find where people get stuck. This continues after you sign in, and it is still not tied to your account: the count records that a step happened and nothing about who reached it. This counting does not identify you. It sets no cookies and stores nothing on your device, it does not record your IP address, and it cannot connect one visit to another or to you.

Within a single visit, the steps of that visit are recorded together, so we can see the order they happened in and how long each one took. That grouping lasts only as long as the page is open: it is held in the page itself, never written to your device, and it is gone and unrecoverable once you leave. So we can see that one visit reached the room picker and stopped there after forty seconds, and we cannot see that it was you, or that you had ever visited before.

Each count also notes the page, where the link came from, your approximate country as a two-letter code, whether the browser is mobile, desktop or tablet, roughly how far down the page was scrolled, and which of four time bands the page was open for. Because nothing links two visits together, these are counts of visits, not of people.

Optional analytics and campaign measurement

Analytics and advertising measurement are separate from the counting above, and remain optional. They load only after you choose Allow. If allowed, RentSeal records limited product events and campaign information such as source, medium and campaign so we can understand signup and purchase journeys. These events also note your approximate country and whether you were on a mobile, desktop or tablet browser. Both are coarse: the country is a two-letter code supplied by the network and the device is one of those three words, worked out from the browser's standard identification. RentSeal does not store your IP address and does not use device fingerprinting.

These events are designed not to include rental addresses, photo or document contents, filenames, landlord email addresses, evidence descriptions or issue notes. Declining does not affect essential RentSeal features, and you can change your choice above at any time.

Export and account deletion

You can request a structured export from Account. The export includes temporary download links for your private files; those links expire after one hour. Download the files themselves if you need a lasting copy.

Account settings provide deletion controls. Accounts with sealed records currently require support assistance; the self-service process stops before removing any files. Contact support@rentseal.app if this applies to you. A completed deletion removes private evidence, document and generated-report files before the account is deleted. Export anything you need first.

Security and retention

RentSeal verifies account ownership before private records can be read or changed. Uploads are checked before they are added to a rental, and sealed inspection originals are protected from update or deletion through normal account and direct data paths. Later evidence is recorded separately as an addendum.

Rental Protection is designed for one rental with a lease of up to 36 months. RentSeal does not delete records automatically; if that changes, you will be told in advance, with time to export, before anything is deleted. Account settings explain export and the available deletion process, including the current sealed-record limitation.