Privacy Policy

The short version

We collect what a rental marketplace needs to work: who you are on the site, what you list, what you book, what you say to the other person, and what you search for. We do not sell any of it, and we do not run advertising.

Your email address is never shown to another user. Neither is the exact address of anything you list, until someone has actually paid for a booking.

The exception is a verified business. If Rentrio verifies an account as a business, the trading address it gives us is published on its listings and shown on the map, because that is the point of being verified. Verification only happens at the account holder’s request, and withdrawing it removes the published address. Pickup instructions stay private either way.

Your account

• Email address and password. Held by our authentication provider, Supabase. Passwords are stored hashed; nobody at Rentrio can read yours. If you sign in with Google we receive your name, email, and profile picture from Google.
• Your public profile. Display name, photo, short bio, city and province, your average rating, review count, completed rental count, and the month you joined. Anyone can see these — that is the point of them.

Listings and location

• Public. Title, description, brand and model, condition, prices, photographs, city and neighbourhood, and an approximate map point offset from your real one.
• Private. Street address, postal code, exact coordinates, and pickup instructions are stored separately and shown only to you, to a renter with a currently paid booking, and to an administrator handling a problem.
• Published, for a verified business only. The business name, trading address, and map point supplied during verification. Pickup instructions are never part of this.

Bookings, messages, and handovers

• Booking dates, the price breakdown at the time you booked, and status history.
• Messages between a renter and an owner. Only the two of you can read a thread.
• Pickup and return confirmations, condition notes, and any photographs you take at handover. Condition photographs are kept in private storage, readable only by the two people in that rental and by an administrator handling a dispute. They cannot be deleted or replaced afterwards — that is what makes them useful evidence.
• Reviews you write, and reviews written about you.
• Problems you report, and the internal notes an administrator adds.

Payments

Card details go directly to Stripe and never reach our servers. We store Stripe’s references — a payment identifier, a transfer identifier, and whether a payout account is set up — so we can trace a payment when something goes wrong. We also keep a copy of the event messages Stripe sends us, which is how we avoid processing the same payment twice.

What we record about how you use the site

• Searches. The words you typed, the filters you used, and how many results came back. Searches that find nothing are the single most useful signal we have about what Halifax wants and cannot get.
• Listing views. Which listing, and when.
• An anonymous visitor id. A random identifier in a cookie your browser cannot read from JavaScript, kept for 180 days. It lets us tell one visit from another without knowing who you are. It is not used for advertising and is not shared.
• Abuse counters. To stop automated abuse we count recent actions against your account id, and for sign-in attempts against your IP address. IP-based counters are deleted automatically after two days.

Analytics are recorded on our server, not in your browser, and are never used to decide anything about money. Every financial figure we report comes from the booking records themselves.

Who can see what

• Other users see your public profile, your listings, and your reviews.
• The other person in a rental additionally sees your messages and, once paid, the pickup address.
• Administrators can see accounts, listings, bookings, payment references, and reported problems, so they can resolve disputes and moderate content. The admin tools deliberately do not display email addresses or private message content.
• Stripe receives what it needs to process a payment. Resend delivers our emails.

Keeping things, and deleting them

If you delete your account we remove your profile. Rental records are kept, because a booking is a financial transaction involving another person who has their own record of it, and because we may be required to retain it. Reviews you wrote stay, since removing one side of a rental’s history distorts the other person’s rating.

Still being finalised. Exact retention periods — how long we keep bookings, condition photographs, message threads, and Stripe event copies — need to be set alongside the tax and record-keeping advice, and then actually implemented as a scheduled deletion job. Today nothing except the abuse counters is deleted automatically.

Where your data lives

Our database and file storage are hosted by Supabase, payments by Stripe, email by Resend. These providers may process data outside Canada.

Still being finalised. Cross-border transfer disclosure, the choice of hosting region, and PIPEDA compliance generally need review before real users are onboarded.

Asking us about your data

Email support@rentrio.ca and we will tell you what we hold about you, correct it, or delete what we are able to delete.