1. Who we are
RenIQ ("we", "us", "our") is the data controller for personal data collected through this service. If you have questions about how your data is handled, contact us at support@reniq.eu.
2. What data we collect
- Account data: your email address, collected when you register. Used to authenticate you and send transactional messages (report-ready notifications, billing receipts, password resets).
- Property data: listing URLs, property addresses, and financial figures (purchase price, expected rent, costs) that you enter when creating a property evaluation. This data is stored in your account and used to generate reports.
- Payment data: payments are processed by Stripe, Inc. We do not store card numbers or bank account details. We receive only a Stripe customer ID and payment/subscription status.
- Usage data: anonymous analytics events (page views, report generation, PDF downloads) collected via Vercel Analytics. No personally identifiable information is attached to these events.
- Session data: a session cookie is set when you log in; it is essential and does not track you across other sites. We set advertising cookies (for Google Ads conversion measurement) only if you accept the cookie banner — never if you decline or ignore it.
- Attribution data (optional): if you accept the cookie banner, we set a first-party cookie storing a random, non-identifying id and, if present, the campaign parameters (UTM) from the link you followed. This tells us which channel brought you here, so we can improve the signup flow. It is never set without your consent, and it is not shared with any advertiser.
3. How we use your data
- To provide the RenIQ service: generate and store investment reports.
- To authenticate you and maintain your session.
- To process payments and manage your subscription or credit balance via Stripe.
- To send transactional email (report ready, billing events). We do not send marketing email without your explicit consent.
- To improve the service using aggregated, anonymous analytics.
4. Data processing and third parties
We share your data only with the following processors, strictly to operate the service:
- Supabase: database and authentication infrastructure, hosted on servers in the European Union (AWS eu-central-1 / Frankfurt). Your account data and property data are stored here.
- OpenAI: property data you submit is sent to OpenAI's API to generate your investment report. This data is used solely to produce your report and is not used to train AI models under our API agreement with OpenAI.
- Stripe: payment processing. Stripe handles all card and banking data directly. See Stripe's Privacy Policy.
- Resend: transactional email delivery. Your email address is shared with Resend only to send emails you have triggered (e.g. report-ready notification).
- Vercel: hosting and anonymous analytics. Vercel Analytics collects anonymous usage data; no personally identifiable information is sent. Google (Google Ireland Ltd): if you accept the cookie banner, Google Ads conversion tracking measures which advertising campaigns lead to signups or purchases. No Google cookies are set unless you consent.
- Cloudflare Turnstile: a privacy-preserving CAPTCHA challenge shown on sign-up, login, and password reset to block automated abuse. It evaluates your browser and IP address; it does not track you across other websites.
We do not sell your personal data to any third party.
5. Data retention
- Account and property data: retained for as long as your account is active. When you delete your account, all associated data (profile, properties, reports) is permanently deleted within 30 days.
- Reports: stored until you delete them or close your account. You can delete individual reports from your dashboard at any time.
- Payment records: Stripe retains transaction records as required by applicable financial regulations.
6. Your rights under GDPR
If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:
- Access: you can request a copy of the personal data we hold about you.
- Rectification: you can correct inaccurate data via your account settings or by contacting us.
- Erasure: you can request deletion of your account and all associated data.
- Portability: you can request an export of your data in a machine-readable format.
- Objection / restriction: you may object to or request restriction of certain processing activities.
You can exercise access, portability, and erasure yourself at any time — export your data or delete your account directly from your account settings.
To exercise any of these rights, email us at support@reniq.eu. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
7. Cookies
We use a single session cookie to keep you logged in. This cookie is essential for the service to function and does not track you across other websites. We use Google Consent Mode: no advertising or analytics cookies are set unless you accept the cookie banner shown on your first visit. If you accept, we set a first-party attribution cookie (a random id plus any campaign parameters from the link you followed) so we can see which channel brought you here, and Google Ads sets conversion cookies so we can measure which campaigns work. If you decline or ignore the banner, none of these cookies are set.
8. Changes to this policy
We may update this policy as the service evolves. We will notify registered users of material changes by email. The "last updated" date at the top of this page reflects the most recent revision.
9. Contact
For privacy-related questions or data requests, contact us at support@reniq.eu.
