Data Processing Addendum
Last updated October 18, 2026
This Data Processing Addendum (“DPA”) is part of the Rentology Terms of Service and applies whenever Rentology Technologies LLC (“Rentology”) processes personal data on behalf of a customer (“you”). It is written to meet the GDPR (Article 28), the UK GDPR and the CCPA/CPRA service-provider requirements.
1. Roles
For the personal data of your guests, renters, tenants, property owners, vendors and team members that you enter or connect, you are the controller (or business) and Rentology is the processor (or service provider). For your own account data (your name, email, billing) Rentology is the controller, as described in the Privacy Policy.
2. What we process, and why
Rentology processes the data you put into the service to run it for you: contact details and messages of the people you manage, bookings and leases, financial records, documents, photos, call recordings and transcripts, and the usage data needed to keep the service secure. We process it only on your documented instructions, which are these Terms, your settings in the product and any written instruction you give us. We do not sell it, use it for our own marketing, or use it to train AI models.
3. Confidentiality and security
Every Rentology employee or contractor with access to customer data is bound by confidentiality. We keep each organization's data logically separated with row-level access rules in the database, encrypt data in transit and at rest, keep sign-in behind verified email or single sign-on, keep daily backups, and log administrative access. We tell you without undue delay, and in any case within 72 hours of confirming it, if a personal-data breach affects your data, with what we know and what we are doing.
4. Subprocessors
You authorize the subprocessors listed on our subprocessor page. We bind each one to data-protection terms at least as strict as this DPA and stay responsible for their work. We update the page before a new one starts processing customer data and notify organization owners of changes that concern their contacts' personal data; you may object within 30 days as described there.
5. International transfers
Rentology and its subprocessors run in the United States. Where personal data of people in the EU, EEA, UK or Switzerland is transferred to the US, the transfer relies on the European Commission's Standard Contractual Clauses (Module 2, controller to processor), the UK Addendum where applicable, and the subprocessors' own transfer mechanisms. The Standard Contractual Clauses are incorporated by reference and we provide a signed copy on request.
6. Helping you meet your obligations
When a guest, tenant, owner or vendor asks you to access, correct, delete or export their data, the product lets you do most of it yourself; where it does not, we help within 10 business days of your request. We help with data-protection impact assessments and regulator inquiries that concern our processing, within reason.
7. Deletion and return
You can export your organization's data at any time while your account is active. When your subscription ends, you have 30 days to export; after that we delete your organization's personal data within a further 60 days, except where the law requires us to keep it (for example payment records) or it sits in routine backups, which expire on their own schedule and are never restored to a live system for any purpose but disaster recovery.
8. Audits
Once a year, and after a confirmed breach, you may ask us for our current security documentation and the results of any independent assessment we hold. If that does not answer a legal requirement you have, you may audit our processing at your cost, on 30 days' notice, during business hours, under confidentiality, in a way that does not expose other customers' data.
9. CCPA / CPRA
For California residents' data, Rentology acts as your service provider: we do not sell or share the personal data, do not retain, use or disclose it outside our direct business relationship with you or for any purpose other than the services, and we tell you if we can no longer meet these obligations.
10. Precedence and contact
Where this DPA conflicts with the Terms on a matter of data protection, this DPA wins. Questions and requests for a signed copy go to support@rentology.ai.