Privacy Policy.

Rentora Houselink Uganda is a digital property listing platform based at Plot 254, Kyebando, Kampala, Uganda. We are responsible for the personal data you provide when using the Rentora mobile application and any associated services.

2.1 Data you give us directly

• Account information: your name, email address, and password when you register as a renter.
• Booking requests: property preferences and any messages you include when submitting a booking.
• Complaints: details you provide when reporting a listing or platform issue.

2.2 Data collected automatically

• Usage data: properties you view, search queries you run, and listings you save as favourites. This powers the view and enquiry counters shown on listings.
• Device data: device type, operating system version, and app version, used for diagnosing technical issues.
• Location data: approximate location (if you grant permission) to surface nearby listings. We do not store precise GPS coordinates persistently.

2.3 Data from property owners and agents

When property owners or agents ("Listers") are added to the platform by an administrator, we collect their name, phone number, optional WhatsApp number, optional email address, and their role (owner or agent). This information is displayed on listings to facilitate direct contact from renters.

We use your data to:

• Operate and improve the Rentora platform;
• Create and manage your renter account;
• Process and track booking requests;
• Send you in-app and push notifications about bookings, new listings, and platform updates (you can opt out at any time in settings);
• Respond to complaints and customer support queries;
• Detect and prevent fraud or abuse;
• Comply with applicable Ugandan laws and regulations;
• Generate anonymous, aggregated analytics to understand how the platform is used.

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

Under the Uganda Data Protection and Privacy Act, 2019, we process your personal data on the following grounds:

• Contract performance: to provide the services you requested (account creation, bookings, notifications);
• Legitimate interests: to operate and secure the platform, detect fraud, and improve the service;
• Legal obligation: where required by Ugandan law;
• Consent: for optional features such as location access or marketing communications (you may withdraw consent at any time).

We share your data only in the following limited circumstances:

• Property owners and agents: when you submit a booking enquiry, your contact details may be shared with the relevant Lister to facilitate communication.
• Service providers: we use trusted third-party services to operate the platform. Each processes data only on our instructions:
  • Supabase (PostgreSQL database hosting — Ireland/EU);
  • Railway (API server hosting — US);
  • Cloudinary (image storage and optimisation — US);
  • Brevo (transactional email delivery — EU);
  • Vercel (web portal hosting — US).
• Legal requirements: we may disclose data if required by a court order or government authority under Ugandan law.

We do not share personal data with advertisers, data brokers, or any unauthorised third party.

We implement industry-standard security measures to protect your data, including:

• All data transmitted over HTTPS/TLS encryption;
• Passwords stored as salted hashes (never in plain text);
• JWT-based authentication with token blacklisting on logout;
• Rate limiting on login and sensitive endpoints to prevent brute-force attacks;
• Failed login attempts are audited and monitored;
• Access to production systems is restricted to authorised personnel only.

Despite our best efforts, no system is completely secure. If you suspect your account has been compromised, please contact us immediately at rentorahouselink@gmail.com.

We retain your personal data for as long as your account is active or as needed to provide the service. Specifically:

• Account data is retained until you request deletion;
• Booking records are retained for 2 years for dispute resolution;
• Complaint records are retained for 1 year;
• Audit logs are retained for 12 months.

After retention periods expire, data is deleted or anonymised.

Under the Uganda Data Protection and Privacy Act, 2019, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your account and associated personal data;
• Withdraw consent for optional processing (e.g. location, marketing);
• Object to processing based on legitimate interests;
• Lodge a complaint with the Personal Data Protection Office of Uganda.

To exercise any of these rights, email us at rentorahouselink@gmail.com. We will respond within 21 days.

Rentora is not intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Listings on Rentora may contain WhatsApp links and phone numbers that connect you directly with property owners or agents. Once you leave the Rentora platform, this Privacy Policy no longer applies. We encourage you to review the privacy practices of any third-party service you interact with.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you via in-app notification or email. Your continued use of the platform after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding your personal data, please reach out: