Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: your email address and profile data provided when you sign in with Google or Apple.
• Financial data: bank transaction records, amounts, merchant names, and account metadata provided via our Plaid integration. We only access accounts you explicitly authorize.
• Property information: addresses, unit details, and categories you enter into the app.
• Usage data: feature interactions, error logs, and performance metrics to improve the Service.
• Receipt images: photos you upload for AI-assisted transaction entry. Images are processed by Google Gemini AI and stored in Google Cloud Storage.

2. How We Use Your Information

• To provide and maintain the Service, including syncing bank transactions and generating reports.
• To improve AI categorization accuracy through anonymized model training.
• To send transactional emails such as security alerts or billing notices.
• To comply with legal obligations and prevent fraudulent activity.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Bank Connectivity (Plaid)

We use Plaid Technologies, Inc. to facilitate bank connections. When you link a bank account, your credentials are entered directly into Plaid's secure interface and are never transmitted to or stored by Rent Genius. Plaid's privacy policy is available at plaid.com/legal.

You may disconnect your bank accounts at any time via the Bank Feeds screen in the app. Disconnection stops future data collection but does not delete historical transaction data already stored.

4. AI Processing (Google Gemini)

Transaction categorization and receipt parsing are performed by Google Gemini AI. Transaction data (merchant name, amount, date) and receipt images may be sent to Google's Gemini API for processing. Google's data handling for the Gemini API is governed by Google's API Terms of Service. We do not use your data to train Google's public models.

5. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, and access controls limiting who within our team can view your data. Our infrastructure runs on Google Cloud Platform.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data by emailing privacy@rentgenius.us. We will process deletion requests within 30 days, subject to any legal retention obligations.

7. Your Rights

Depending on your location, you may have rights including:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data.
• Portability: request a machine-readable export of your data.

To exercise these rights, email privacy@rentgenius.us.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last updated" date above and, where appropriate, by sending an email notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please contact us at:

privacy@rentgenius.us