Privacy policy
In force from 1 September 2026.
This English text is a translation provided for convenience. The binding version is the Hungarian one, available at Adatkezelési tájékoztató. Where the two differ, the Hungarian text prevails.
1. Two different roles that need to be kept apart
Two kinds of processing take place while RentIQ is used, and the responsible party is not the same in each.
The landlord's data. When you create an account as a landlord, AI Executive Kft. is the controller of your own data. Sections 2 and 3 of this policy apply to it.
Tenants' data. When you record a tenant, a lease, a meter or a settlement, you are the controller of the tenant's personal data, and AI Executive Kft. acts as a processor on your instructions. This means that informing the tenant is your obligation, and the Provider processes the tenant's data solely on your instructions. The details are set out in the Data processing agreement, which comes into being between the parties through the use of the Service.
2. What data we process about the landlord
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, e-mail address, password hash, language setting | Creating and running the account | Performance of a contract | Until the account is deleted |
| Login and session data, IP address, device data | Security, prevention of abuse | Legitimate interest | 12 months at most |
| Subscription and payment data, billing name and address | Payment of fees, invoicing | Performance of a contract, legal obligation | 8 years under the Hungarian Accounting Act |
| Support correspondence | Support, complaint handling | Performance of a contract, legitimate interest | 5 years from closing the complaint |
| System logs | Operation, troubleshooting | Legitimate interest | 12 months at most |
The Provider neither sees nor stores bank card data. Payment is handled by the payment service provider, on its own interface.
3. What data about tenants enters the system
This data is recorded by the landlord, and the landlord is the controller of it.
- The tenant's name, e-mail address and telephone number.
- The address of the rental unit and the details of the lease: term, rent, items.
- Meter readings, the time they were taken and the photographs uploaded with them.
- Settlement documents issued and the payments related to them.
- Documents uploaded by the landlord, a lease agreement for example.
- If the tenant uses the tenant application, the data belonging to their login and the device identifier needed for notifications.
The Provider does not use this data for its own purposes, does not analyse it and does not pass it on; it processes the data only to the extent needed to provide the Service.
4. Automated decision-making
The Service does not use automated decision-making and does not carry out profiling. The calculations shown in the system are produced from the data supplied, according to rules fixed in advance.
5. Who has access to the data
Within the Provider, access is limited to those members of staff who need it to carry out their duties. Beyond them, the following processors are involved.
The application and the personal data held in it are located on the Controller's own server, operated in Hungary. The Controller uses no external hosting provider for the application. The rentiq.hu marketing website is hosted by Hostinger International Ltd.; that website contains no user accounts and no forms.
| Processor | Activity | Place of processing |
|---|---|---|
| Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, United States) | Network delivery, attack protection, termination of the encrypted connection | United States |
| Plus Five Five, Inc. ("Resend", 2261 Market Street #5039, San Francisco, CA 94114, United States) | Sending system messages and notifications | United States |
| Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) | Delivery of mobile push notifications | European Union and the United States |
| Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) | Measuring traffic on the rentiq.hu website (Google Analytics 4) and separately allowed YouTube video | European Union and the United States |
| Stripe Payments Europe, Limited (One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland) | Collecting the subscription fee | European Union and the United States |
| KBOSS.hu Kft. (Számlázz.hu) | Issuing invoices | Hungary |
Where a processor handles data outside the European Economic Area, the transfer takes place on the basis of the European Commission's standard contractual clauses or an adequacy decision.
6. Data security
Communication between the Service and the servers takes place over an encrypted channel. Passwords are not stored in a form that can be reversed, only as a cryptographic hash. Backups leave the server encrypted. Access is tied to roles, and a tenant sees only the data belonging to their own lease.
7. Rights of the data subject
A data subject may request access to the data concerning them, its rectification or erasure, and restriction of processing; they may object to the processing and may exercise the right to data portability.
If the request concerns tenant data, it must be addressed to the landlord, because in that case the landlord is the controller. The Provider assists the landlord in meeting the request.
Requests may be submitted at the e-mail address given above. The Provider fulfils a request within one month at the latest.
8. Redress
A complaint may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information.
Nemzeti Adatvédelmi és Információszabadság Hatóság, 1055 Budapest, Falk Miksa utca 9-11., Hungary. Postal address: 1363 Budapest, Pf. 9. Phone: +36 1 391 1400. Website: naih.hu
The data subject may also turn to the courts, at the regional court competent for their place of residence or stay.
9. Website statistics, cookies and embedded video
These settings apply to the public pages of rentiq.hu. Google Analytics 4 starts only after statistical consent. It measures page views, campaign labels, pricing views, clicks towards registration and, if allowed separately, video playback. A registration click does not prove that the registration page loaded or that an account was created. This integration does not measure activity inside app.rentiq.hu.
Analytics uses a pseudonymous browser identifier, page paths, campaign parameters, referring website and device information. Form contents, names and email addresses are not deliberately sent. Unknown URL parameters and fragments are excluded from the events configured by this website. Google signals and advertising personalization are disabled.
The YouTube video loads only when separately allowed and played. Loading it establishes a connection to Google/YouTube, which may process connection data, including the IP address, and playback data. The player uses youtube-nocookie.com. Allowing video does not also allow statistical measurement.
Consent is the basis for these optional services. You can refuse them and still use the website. The Cookie settings button in the footer allows you to change or withdraw your choice at any time. Withdrawal does not affect processing that occurred before withdrawal.
Your choice is stored in this browser for 180 days under rentiq_web_consent_v1. Google Analytics cookies (_ga and _ga_…) are configured for 180 days; repeat visits may renew their expiry. Deleting browser storage also removes your choice. Withdrawal disables further website analytics and removes this website's Analytics cookies.
PostHog and Meta Pixel are not active in this release. A future activation will be accompanied by updated information and the appropriate consent choice.
10. Connecting your own Google Drive
If your subscription includes your own storage, you can connect the Service to your own Google Drive on the Settings → Storage page of the RentIQ application. Uploaded documents, meter photos and copies of issued settlement receipts then go into your Google Drive, in a folder named "RentIQ". You start the connection yourself on Google's own consent screen, and you can end it at any time.
What RentIQ can access. The Provider requests Google's drive.file permission only. With it, RentIQ can reach only the files and folders it has created in your Drive. It cannot see, read or change anything else in your Drive.
| Data received from Google | What we use it for | How we keep it |
|---|---|---|
| Your Google account identifier and e-mail address | To show on the Storage page which account is connected, and to check on reconnection that it is the same account that holds your files | In the Provider's database, until your RentIQ account is deleted |
| The access grant issued by Google (refresh token) | Only to upload, open and delete the files RentIQ created, and to refresh the grant once a day so that it stays valid | Encrypted with AES-256-GCM, until you disconnect; the short-lived access token exists in memory only |
| The Drive identifiers of the files and folders created | To open and delete the file from RentIQ | In the Provider's database, until the record the file belongs to is deleted |
| The contents of the files | To upload them to your Drive, and to display or download them in RentIQ | On the Provider's server only while in transit; no copy is kept |
What we do not use it for. Data received from Google is used only for the storage feature described above. It is not used for advertising, profiling or training artificial intelligence models, it is not sold, and it is not passed to third parties unless the law requires it. The Provider's staff do not read the files in your Drive unless you ask them to, or unless it is necessary for a security investigation or to comply with the law.
RentIQ's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Where the files are. The files are in your Google account, under your own agreement with Google. Files concerning tenants, such as meter photos and lease agreements, therefore go into your storage; as controller, that decision is yours.
Disconnecting. When you disconnect on the Settings → Storage page, the Provider revokes the grant with Google and deletes the stored token. Files already uploaded to your Drive remain yours; disconnecting does not delete them. You can also revoke the grant in your Google account settings: myaccount.google.com/connections. When your RentIQ account is deleted, all data of the connection is deleted from the Provider's systems.
11. Feedback and problem reports from the app
On the Settings → Feedback page of the web application, under More → Send feedback in the landlord mobile app and under Settings → Send feedback in the tenant app, you can report a problem and send the Provider an idea or a suggestion. For the feedback you send, whether as a landlord or as a tenant, AI Executive Kft. is the controller, because the feedback concerns the Service, not the lease. The landlord does not see a tenant's feedback, and the sender cannot read the submitted text back; after sending, they receive only the feedback's reference number.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| The type and text of the feedback and, if you attach one, a screenshot (PNG or JPEG, 5 MB at most) | Investigating and fixing the reported problem, considering the suggestion | Legitimate interest | 5 years from the feedback being marked resolved or closed; kept for as long as it is open |
| Your account identifier and role (landlord or tenant), the interface language, the interface used (web or mobile app) and its version | Linking the report to the account and locating the problem | Legitimate interest | As above |
| In the web application, unless you remove them before sending: the technical details of the last error (the name of the operation, the kind and code of the error, the HTTP status code and the request identifier) | Tracing the error in the system logs | Legitimate interest | As above |
| Changes to the feedback's status and when they happened | Following how the report is handled | Legitimate interest | As above |
Feedback is read by the members of the Provider's staff assigned to it. The Provider's staff may receive an e-mail notification of new feedback, carrying its type, the sender's role and its text but not the screenshot, through the processor that sends system messages (section 5).
The mobile apps first store the feedback on the device and send it when there is a connection. The temporary copy the image picker makes of a screenshot is deleted when the feedback is saved. Once it has been sent, the text and the stored copy of the screenshot are deleted from the device as well; the feedback's type, reference number and time and your account identifier remain, so that the feedback appears in your list. Feedback not yet sent stays on the device after you sign out, and is sent when you sign in again with the same account.
Please do not put more personal data into the feedback or the screenshot than describing the problem needs, in particular about other people, such as tenants.
12. Amendment of this policy
The Provider may amend this policy. It informs users of any amendment within the Service or by e-mail.