Legal

Data Processing Addendum

This addendum describes how Rentyn processes customer personal information for landlord and property-operator accounts.

Last updated: June 3, 2026

This customer-facing DPA is a practical starting point. Enterprise customers may require a signed version, subprocessors list, security exhibit, and jurisdiction-specific clauses.

1. Scope

This Data Processing Addendum applies when Rentyn processes personal information on behalf of a landlord, property operator, or other business customer under the Rentyn Terms of Service or another written agreement.

Rentyn's mailing address is 265 rue Hymus, Pointe-Claire, QC H9R 0G2, Canada. Rentyn serves customers in Canada and the United States.

2. Roles

The customer is the controller, business, or equivalent decision-maker for tenant, resident, vendor, property, and staff personal information submitted to Rentyn. Rentyn acts as a processor, service provider, or equivalent vendor when processing that information to provide the service.

3. Processing Instructions

Rentyn will process customer personal information according to the customer's documented instructions, including the service agreement, product configuration, account settings, support requests, and lawful use of the Rentyn service.

4. Categories of Information

5. Purpose of Processing

Rentyn processes customer personal information to provide, secure, support, maintain, improve, and troubleshoot the service; route tenant communications; manage AI-assisted workflows; produce summaries; support billing; and comply with legal obligations.

6. Confidentiality and Security

Rentyn will use reasonable administrative, technical, and organizational safeguards designed to protect customer personal information. Personnel and service providers with access to customer personal information must use it only for authorized purposes and are subject to confidentiality obligations.

7. Subprocessors

Rentyn may use subprocessors to provide hosting, database, authentication, communications, transcription, email, payment, AI, analytics, security, and support functions. Current or expected subprocessors may include Clerk, Supabase, Twilio, Stripe, Brevo, Meta, Deepgram, Anthropic, infrastructure providers, and similar vendors.

Rentyn remains responsible for subprocessors' processing of customer personal information as required by applicable law and the governing agreement.

8. Customer Responsibilities

The customer is responsible for lawful collection and use of customer personal information, including notices, consents, tenant communications, call recording consent, SMS consent, emergency policies, data accuracy, user permissions, and account configuration.

9. Assistance

Rentyn will provide reasonable assistance, taking into account the nature of the service, for privacy requests, security incidents, and compliance obligations relating to customer personal information.

10. Return or Deletion

Upon account termination or written request, Rentyn will delete or return customer personal information where reasonably available and legally permitted. Unless a different account setting, plan, legal requirement, or written agreement applies, Rentyn generally aims to delete or anonymize tenant records, SMS logs, call recordings, transcripts, summaries, and maintenance history within 24 months after account closure. Rentyn may retain copies as needed for legal compliance, security, fraud prevention, dispute resolution, unpaid invoices, backups, and legitimate business records. Backups and system logs are deleted on normal rotation schedules.

11. International Processing

Customer personal information may be processed in Canada, the United States, and other locations where Rentyn or its subprocessors operate. Customers are responsible for ensuring that their use of Rentyn is lawful for their tenant, resident, and property locations.

12. Contact

Privacy and data processing questions may be sent to support@rentyn.ca.