Privacy policy

Rentifi is run by Rentifi Canada Inc., in Toronto, Canada. We are responsible for the personal information we hold. Questions about it go to our privacy officer at privacy@rentifi.ca.

What we hold depends on how you use Rentifi, and most of it is what you choose to give us.

If you are a renter

• Your account: email address and a password (stored protected, never readable by us), or your Google sign-in details if you choose that.
• Your passport: your legal name, phone, city and province, applicant status, and a public username and link.
• Verification: the result of identity verification done through Interac, and income evidence you provide: documents you upload, income confirmed through a bank connection you authorise, earnings you link (for example from Uber), or income you state.
• Rental history and references: past addresses and landlords, and the answers of people you name as references (we email them, and record their answers and the network address and browser they used, to check responses are genuine).
• Your activity: applications, messages with landlords and agents, tour bookings, household or group applications, and the documents you choose to share.
• Lease signing: the name you type, the time, and the network address you signed from.

If you are a landlord, agent, brokerage or property manager

• Your account and profile: name, company, contact details, licence number where relevant, team members and, for landlords, subscription and billing details (card details are held by Stripe, not us).
• Your listings, the decisions you make on applications, your messages, and the people you invite or add as leads.

If you are a prospective renter an agent or property manager invited

• Your email address and name as the person who invited you entered them, and your answers to the short questionnaire. You can opt out from any email we send. If you never answer, we delete your details 90 days after the last invitation.

Everyone

• Technical information: your network address and browser, used to keep the service secure and to limit abuse, and server logs kept by our host.
• Cookies: we use cookies that keep you signed in, and a setting in your browser that remembers your light or dark choice. We do not use advertising or analytics cookies or trackers.

If you choose Sign in with Google, Google tells us your name and email address and that the address is verified. We ask for nothing else from your Google account and never see your Google password.

• To run Rentifi: create your account, build and verify your passport, and let you share it, apply, book tours, message and sign.
• To send you the emails the service depends on: confirmations, invitations, decisions and reminders. We do not sell your information or use it for advertising.
• To keep the service safe: detecting fraud and abuse (for example repeated bulk shortlisting, or references answered from the same connection as the renter's), keeping records of serious incidents, and meeting legal obligations.
• To support you and to improve the service.
• AI features: some assistance features, such as drafting and the help assistant, can use AI language models through our host's AI service, with zero data retention requested. We do not use AI to make a decision about an application. At the time of writing, no AI feature reads the documents you upload. Before one does, we will update this policy and ask for your consent where the law requires it.

You are in control of the main thing: your passport.

• Your passport is shown to a landlord, agent or property manager only through a link you share or an application you make. You choose what a shared link shows, you can revoke it at any time, and some details (such as your exact address and contact details) stay hidden until a landlord shortlists you.
• Your public passport page can be seen by anyone who has its link, so share it deliberately.
• A property management firm sees an owner's applications only once the owner has accepted that firm, and can act for the owner only as the owner has authorised. Each time someone at a firm opens an applicant's file, a record is kept that the owner can see.
• People you name as references see only what is needed to answer you.
• Landlords, agents and property managers who receive your information through Rentifi are responsible for how they handle it, under their own privacy obligations.
• We disclose information when the law requires it, to protect people from fraud or harm, or in a sale of our business (with the same protections continuing).

These companies handle information on our behalf, only to provide the service. Some are used only if you choose the feature.

Our database and the files you upload are stored in Canada, in AWS Canada Central. Our application servers run in the United States, and some of the providers above process information outside Canada. When information is handled outside Canada it can be accessed by courts and authorities there under their laws. We choose providers carefully and ask them to protect your information, but we cannot promise it stays out of reach of foreign law.

• Everything sent between your device and Rentifi is encrypted in transit, and stored data is encrypted at rest by our database and storage provider.
• Access is limited by role and enforced by the database itself: a renter sees their own file, a landlord sees their own listings and applicants, and a firm sees only the owners who accepted it.
• We keep a record of serious incidents. If a breach creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada, as the law requires.

No system is perfectly secure. If you think your account has been misused, contact us straight away.

We keep your information while your account is open and as long as we need it for the reason we collected it, or as the law requires. A lead who never answers an invitation is deleted 90 days after the last one. If you close your account or ask us to delete your information we will do so, except what we must keep by law or to deal with a dispute or a security incident.

• Ask to see the personal information we hold about you, and to correct it if it is wrong.
• Withdraw a consent you gave, stop emails (every email has a link, or write to us), or ask us to delete your information.
• Revoke a link you shared, and remove yourself from an applicant package a firm sent to an owner.
• Ask us a question or make a complaint. We will answer within 30 days.

If we have not resolved a concern, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Rentifi is for adults. It is not meant for anyone under the age of majority.

Write to our privacy officer at privacy@rentifi.ca, at Rentifi Canada Inc., Toronto, Canada. We will tell you what we need to confirm who you are before sharing or changing information.

We may update this policy as the service changes. The date at the top says when it last changed, and for a significant change we will tell you by email or in the product.