Privacy policy

What we collect

Seekers: name, email, a password hash, an optional phone number, and hunt details (city, locality, stay, budget and its currency, move-in date, and must-haves). We also store which channel created the hunt, including an assistant such as Claude, ChatGPT, Grok, or Gemini, plus UTM source, medium, and campaign when you arrived with those parameters.

Partners and brokers: name, email, a password hash, the business name you give us, the homes you publish (rent, deposit, area, photos, availability), and your Grab history.

Transaction data: Grab amounts, payment status, and Razorpay payment references. We do not store card numbers or UPI credentials. Razorpay processes the payment. Rent and deposits are not our transaction data, because RentalHunter never holds them.

Verification: records of a phone check. The planned check is WhatsApp. You would send a prefilled message to the RentalHunter business number, and Meta’s WhatsApp Cloud API would deliver it to us. Meta Platforms processes that message, including the sender’s phone number and the message text, under WhatsApp’s terms and Meta’s privacy policy. That connection is not live yet. Until then, an admin may mark a phone verified by hand. A rejected number is flagged as suspected fake. We do not delete the account or the hunt when we flag a number.

Location: the city and locality you enter on a hunt. We do not read your device’s location, and we do not store a browser geolocation.

Technical data: standard server logs (IP address, device, browser, pages visited) used for security and debugging.

How we use it

To run hunts, alerts, and partner listings, and to show a home that fits the filters you set.

To verify a phone and show a verified badge after a check succeeds.

To process Grab payments through Razorpay.

To handle junk-lead reports and disputes.

To convert a display currency using an exchange-rate provider.

To fix bugs and improve the service.

Consent

We use seeker, partner, and transaction information only for the purposes listed above. Under the Consumer Protection (E-Commerce) (Amendment) Rules, 2026, using it for any other purpose requires your express and affirmative consent, which we ask for separately.

On every query, whether it comes from an assistant (an LLM or MCP channel) or directly on the website, you give consent for that query only. It is not a blanket consent that covers later queries. You answer two separate Yes/No choices:

You can withdraw consent for a query from your query dashboard. Withdrawing stops further sharing for that query. It does not recall a detail already sent.

• Share my email with partners whose listings match my requirements
• Share my phone number only with the partner whose property I shortlist

Who we share it with

Before a partner Grabs a lead, that partner sees anonymized demand only: city, locality, budget, stay, and move-in. They do not receive the seeker’s name, email, or phone.

A partner initiates contact only after Grabbing and paying for the lead. The partner creates a unique link for the inventory that matches the lead and sends that link to the seeker by email, and only if the seeker answered Yes to sharing their email for that query. The seeker’s query dashboard also lists those inventories as match results. The phone number is not shared at this stage.

The seeker shortlists the properties they like and expresses interest. Only the partner who owns a shortlisted property receives the confirmed interest and the seeker’s phone number, and only if the seeker answered Yes to sharing their phone for that query.

Partners may use seeker details only for that query and those listings. They may not use them for other listings, for marketing, or for resale.

We use processors to operate the service: Railway (hosting and database), Razorpay (payments), Meta/WhatsApp (verification messages), and Frankfurter or ExchangeRate-API (display-currency rates). We do not sell personal data.

Assistants that call our tools receive the listing text you asked them to search. They do not receive other seekers’ accounts.

Grievance officer

Grievance contact: tanmay@rentalhunter.co. Complaints are acknowledged within 48 hours and redressed within one month.

India DPDP Act 2023

If we process your personal data in connection with offering this service in India, the Digital Personal Data Protection Act, 2023 applies. You may ask for a summary of the data we hold, for correction of inaccurate data, for erasure when the purpose is done, to nominate someone to exercise these rights, and to raise a grievance with us.

Send that request to tanmay@rentalhunter.co. Complaints are acknowledged within 48 hours and redressed within one month.

UAE PDPL

If you are in the United Arab Emirates, including Dubai or Sharjah, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) may also apply to processing of your personal data. You may ask for access, correction, and erasure, and you may object to processing in the cases that law allows.

The app is hosted outside the UAE. Sending a hunt or a verification from the UAE means that data is transferred to that host so the service can run.

Retention and security

We keep account and hunt data while the account is active and as needed for legitimate records. Unpurchased demand leads expire 7 days after they are created. Payment records stay as long as we need them for accounting, tax, and disputes. A phone verification flag stays on the account until you ask for deletion or an admin reverses a flag by approving the number. Data is encrypted in transit and access is restricted to what is needed to operate the service. You can ask us to correct or delete your data at tanmay@rentalhunter.co.

Children

The service is not directed at children under 18.

Changes

Changes are published on this page with a new date above. Continued use after a change means you accept the updated policy.