Privacy Notice

1. Who we are

RentSafe Spain ("RentSafe", "we", "us") is operated by Darcy Louise Renouf, a sole trader, acting as the data controller for the personal data described in this notice. Contact: support@rentsafespain.com.

2. Our privacy principles

We designed RentSafe Spain to hold as little of your personal data as possible. The listing text and draft contract you paste in are analysed in memory and deleted once your report is generated. We do not keep your contract text and do not use it to train AI models.

3. What we collect and why

• Listing and contract text — used solely to generate your report and deleted immediately after. Legal basis: performance of a contract.
• Optional context (rent, city, deposit) — used to tailor the report; not retained after the report is generated. Legal basis: performance of a contract.
• Email address — used to email you your report and, where relevant, a refund confirmation. Retained with the payment record. Legal basis: performance of a contract.
• Marketing opt-in — if you tick the optional box at checkout, we store your email to send occasional rental-safety tips. You can unsubscribe at any time from any email or via our unsubscribe page. Legal basis: consent.
• Payment record — a record of your purchase (transaction ID, amount, timestamp, refund status). We do not receive or store your card details. Legal basis: legal obligation (tax/accounting) and legitimate interests (fraud prevention).
• Basic technical logs — anonymous counts of checks run, and standard security/error logs. Legal basis: legitimate interests (security and service reliability).

4. Who we share data with

• Stripe — our payment processor. Stripe handles card details and payment authorisation; we only receive a payment reference and status. See Stripe's Privacy Policy.
• Google Analytics — we use Google Analytics 4 to understand how visitors use the site and to measure checkout and purchase conversions. Google may process IP addresses and set cookies. See Google's Privacy Policy.
• Hosting and email infrastructure — Lovable Cloud (Supabase and Cloudflare) provides application hosting, database, and transactional email delivery.
• AI provider — pasted text is sent to a large-language-model provider through the Lovable AI Gateway for the sole purpose of generating your report. Providers are instructed not to retain content for training.
• Authorities — where required by law.

5. International transfers

Some of our providers may process data outside the UK / EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent transfer mechanisms.

6. How long we keep data

• Pasted listing and contract text: deleted immediately after your report is generated.
• Report content and email: kept for up to 12 months so you can request a resend.
• Payment record: kept for as long as required by Spanish tax and accounting law (typically 6 years).
• Marketing subscribers: kept until you unsubscribe.

7. Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to our processing of your personal data, to portability, and to withdraw consent at any time (without affecting prior processing). You also have the right to complain to your local data protection authority — in Spain, this is the Agencia Española de Protección de Datos (AEPD).

To exercise any of these rights, email support@rentsafespain.com. We will respond within one month.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and minimising the personal data we hold — to protect the data we process.

9. Cookies

RentSafe Spain uses only essential storage (a small language-preference item saved in your browser). We do not use marketing or third-party advertising cookies.

10. Changes

We may update this notice from time to time. The "Last updated" date at the top will always reflect the current version.