Rentfolio

Privacy policy

In effect from 15 October 2026

This document exists in Slovak and English. The Slovak version prevails.

This document explains how we handle your personal data when you use Rentfolio.

Data about tenants and rental applicants that you enter into the app is covered by a separate document, Processing of tenant data. For that data we are a processor and you are the controller.

This is a translation of the Slovak original. In case of any difference, the Slovak version prevails.

1. Who processes the data

The controller is Mauer Enterprises s. r. o., registered office Černyševského 10, 851 01 Bratislava, mestská časť Petržalka, company ID 52069818.

For data protection matters contact us at podpora@rentfolioapp.com.

2. What data we process about you

  • email address and your password as an unreadable hash created by the Supabase authentication service,
  • your name if you enter it, your country and the app language,
  • your plan, meaning whether you use free or paid features,
  • the content you put into the app: properties, leases, payments, statements, readings, uploaded documents,
  • hosting access logs, which contain the IP address, time and type of request,
  • a record of reminders and invitations sent, so that nothing is sent twice.

3. Why and on what legal basis

Performance of the contract: to sign you in, to keep and calculate your data, and to send the reminders and invitations you ask for.

Legitimate interest: security of the service, prevention of misuse, detecting and fixing faults.

Legal obligation: once payments go live, accounting and tax records to the extent required by law.

We do not send marketing email and we do not use your data for profiling or automated decision making.

4. Who receives the data

We do not sell data. It reaches only the providers the service cannot run without, and they process it on our instructions:

  • Vercel Inc., hosting and operation of the web app, deployed in the Frankfurt region,
  • Supabase, database, authentication and file storage, region Ireland (West EU),
  • Resend, sending email from the app,
  • WebSupport, the domain and domain mail provider.

5. Transfers outside the European Union

Vercel, Supabase and Resend are companies based in the United States. We placed the service in European regions, but support and administration may involve access from outside the European Union. This happens under the data protection terms agreed with these providers.

6. How long we keep data

  • account data and everything you put into it, for as long as the account exists,
  • when the account is deleted, uploaded files are removed first and then the account itself; the remaining rows go with it, because they reference the account directly,
  • screening requests are deleted according to the periods in the tenant data document, together with uploaded documents, by a daily background job,
  • hosting access logs according to the provider settings, typically days to weeks,
  • accounting records, once payments go live, for the period required by law.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. Most of this you can do in the app directly: you see your data, correct it, and delete the account with everything in it.

To exercise any of these in writing, email podpora@rentfolioapp.com.

If you are not satisfied with how we handled it, you may complain to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, or to the supervisory authority in your country of residence.

8. Cookies

The app uses only what it needs to work, and nothing for tracking or advertising:

  • Supabase authentication cookies, which keep you signed in,
  • a cookie with your chosen language, so the app opens in the language you picked.

9. Security

Connections are encrypted. Every database table has row level security enabled, so a request from one account cannot reach rows of another account even if the application has a bug. Uploaded documents sit in private storage inside the account folder and are opened through short lived links. Links for rental applicants and account invitations are stored only as an unreadable hash and expire. The database service key stays on the server and never reaches the browser or the mobile app.

No measure is perfect. If we find a personal data breach that poses a risk to you, we will tell you without undue delay.

10. Changes to this document

We will update this document when the processing changes, for example when payments go live or a provider changes. The effective date is in the header and we will flag material changes by email or in the app.