Privacy policy

Rentora is a rental marketplace that connects landlords and tenants in Denmark. Rentora, Copenhagen, Denmark, CVR 46766490, is the data controller for the personal data described here. This policy explains what personal data we collect when you use the platform, why we collect it, and how you can exercise your rights under the EU General Data Protection Regulation (GDPR).

If you have questions about this policy or how your data is handled, you can reach us through our Contact page.

We collect the following categories of personal data:

• Account data: your email address and password, stored as a hash, never in plain text.
• Profile data: for tenants, this may include your name, age, occupation, and a profile photo; for landlords, contact details and any information you provide about yourself.
• Who sees your tenant profile: publishing your tenant profile lets landlords you are in contact with, about a home or a lease, open it. Separately, you can choose to let landlords find your profile: it then also appears to landlords browsing tenants, who can write to you, and visitors who are not signed in see your first name, age, type of work and search areas, without your photo. This is off unless you turn it on, and you can turn it off at any time on your profile.
• Listing data: for landlords, the property address, description, photos, rent, and other details submitted when creating a listing.
• Messages: the content of messages you send to other users through the on-platform chat.
• Technical data: your IP address, browser type, device information, and usage data collected automatically as you use the site.
• Where you found us: when you create an account, we record the link or site you arrived through, such as a campaign tag in the link or the referring website, so we can understand which channels bring people to Rentora. It is kept with your account and used for nothing else.
• Listing views: When you open a listing, we record that it was viewed, with your network address replaced by a one-way code. This is how landlords see how many people looked at their listing. The code cannot be reversed to recover your address.

• Contract performance: to create and manage your account, let you publish or browse listings, and enable messaging between landlords and tenants. Without this data, we cannot provide the service.
• Legitimate interest: to keep the platform secure, review listings, prevent fraud and abuse, and understand and improve how the service is used.
• Consent: for letting landlords find your tenant profile, and for any optional analytics or marketing communications. Where we rely on consent, you can withdraw it at any time without affecting your ability to use the core service.

We use the following providers to run the platform, and share with each only the data it needs to do its job:

• Supabase: provides our database, user authentication, and file storage.
• Vercel: hosts and runs the website, and receives the data passing through it and technical logs.
• Vercel Speed Insights: collects anonymous page-performance data, such as how quickly pages load, without cookies.
• Stripe: processes payments for rent, Premium, Boost and photo shoots. Card details are entered with Stripe and never reach Rentora.
• Resend: sends transactional emails, such as notifications about your listings or reports.
• Anthropic: assesses the text of new and changed listings with an AI model, to detect fraud: the address, description, rent, size, rooms and type of home.
• Google Cloud Vision: searches the web for up to four photos of each listing, to detect photos copied from elsewhere.
• Google Analytics: website statistics, only if you accept analytics cookies.
• Microsoft Clarity: shows how pages are used, for example clicks and scrolling, only if you accept analytics cookies.
• Cloudflare Turnstile: checks that sign-up, sign-in and password changes are made by a person and not a bot, using technical signals from your browser.
• LocationIQ: provides the map images. Your browser fetches them directly, so LocationIQ receives your network address and the area you are viewing.
• CARTO: provides the map images when LocationIQ is unavailable, on the same terms.
• Our photography partner: when you book a photo shoot for a listing, the address of the home, your name, email address and phone number, your instructions for getting in and any notes you add are shared with the photographer you book, so they can carry out the shoot and reach you on the day.

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

We keep your personal data for as long as your account is active. You can delete your account at any time under Account settings, or ask us to through our Contact page. Your profile, photos, listings, saved searches and the messages you wrote are then removed straight away. We keep records we must keep by law, such as bookkeeping records of payments made through Rentora for five years, and leases you agreed together with their documents, inspection reports and the conversation that led to them, because they are the other party’s record too and may be needed if a claim is made. These records no longer lead to your name, email or profile. You cannot delete your account while a lease is running or rent is still being settled.

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your data, sometimes known as the “right to be forgotten”. You can delete your account yourself under Account settings, or ask us through the Contact page.
• Restriction of how we process your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection to processing based on legitimate interest.

You also have the right to lodge a complaint with Datatilsynet, the Danish Data Protection Agency, if you believe we have not handled your data in accordance with the law.

How we use cookies and similar browser storage, and how to change your choice, is described on our cookie page.

To exercise any of the rights listed above, or if you have any other question about how your data is handled, please get in touch through our Contact page. We will respond to your request as soon as we reasonably can.