Privacy Policy | RentMate

Last Updated: November 3, 2026

Prevailing Language: This English translation is provided for convenience. In the event of any discrepancy or interpretive conflict between the Hebrew text and the English translation, the Hebrew version shall prevail.

The RentMate application and service (hereinafter: "the App" or "the Service") is operated and managed by the Service Operator (as detailed in Section 7 at the bottom of this document; hereinafter: "Service Operator" or "RentMate"), the sole owner and rights holder of all intellectual property, assets, and brand rights. The Service Operator respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy outlines how we collect, use, and protect your information when you use our mobile application and related web services.

1. Information We Collect and How We Use It

Notice Pursuant to Section 11 of the Israeli Protection of Privacy Law, 1981: You are under no statutory obligation to provide any personal data, and any information you submit is provided voluntarily and with your consent in order to use the Service. However, without providing essential account details, we may be unable to deliver personalized rental management features.

We collect information to provide you with a smart, secure, and personalized rental management experience. This includes:

• Basic Profile Information: Your full name, email address, and profile picture, used to identify you and secure your account.
• Property and Lease Details: Property addresses, contract dates, rent amounts, payment terms, and index linkage preferences.
• Uploaded Documents: Lease contracts, handover protocols, utility bills (electricity, water, property tax), and meter photos that you choose to upload.
• Tenant Contact Information & Message Logs: If the Landlord utilizes tenant messaging links (One-Tap WhatsApp message links dispatched directly from the Landlord's personal device) or optional system notifications (in supported plans, subject to tenant Opt-in), we collect the tenant's phone number, consent status, and technical transmission logs for service operation, billing verification, and stability.
• Rental Applicant Data & Public Registry Checks: When submitting a rental application or verification documents, we collect the applicant's name, national ID number, contact details, employment/income details, and verification files (ID copy and payslips) shared with the Landlord and automatically purged after 14 days. Subject to applicant consent, Landlords may also query official publicly accessible Israeli government registries (Bank of Israel restricted accounts and Ministry of Justice insolvency registries via data.gov.il).
• User-Initiated WhatsApp Support Inquiries & Automated AI Triage: When you initiate an inquiry to RentMate's official WhatsApp support channel (055-9419550), your message content, sender phone number, and any attached media files are processed to provide an automated AI-powered initial response by RentMate's virtual support assistant and to escalate the inquiry to a human support representative when needed. Under strict data minimization controls, conversations resolved automatically remain sealed in a restricted, access-logged evidentiary archive rather than the routine support inbox, and any exceptional administrative review requires an explicit justification recorded in an immutable security audit log.
• Crash & Diagnostic Logs: In the event of an application error or crash, technical diagnostic data (error message, stack trace, device model, operating system version, and an anonymous technical identifier) is automatically collected solely for system reliability monitoring, real-time bug fixing, and data security. This diagnostic data is strictly sanitized and never contains financial details, personal documents, contact information, or passwords.

Admin Access & Operational Data Processing: The Service and its authorized system administrators (Admins) process and access user profile data, property details, lease contracts, and uploaded documents solely for the purposes of operating the Service, generating lease agreements and handover protocols, calculating CPI linkage, providing technical support and customer success services, ensuring data security, preventing fraud, and complying with legal obligations. All administrative access is subject to strict confidentiality and data protection obligations under applicable privacy laws.

2. Data Sharing, Direct Marketing, and Commercial Partnerships

Marketing Communications & Offers: Subject to explicit user consent (including ticking the designated consent checkbox or as set forth in the Terms of Service), RentMate may use contact details provided by you to deliver notifications, newsletters, marketing updates, and personalized commercial offers from the platform and/or trusted commercial partners.

Commercial Partner Offers: Such offers may include complementary products and services such as property insurance, financial solutions, moving and storage, home maintenance, professional contractors, and legal services.

Data Transfers: RentMate does not sell or rent your personal contact information to third parties. All marketing communications are dispatched directly by RentMate. Personally identifiable information is shared with a commercial partner only if you express explicit interest in a specific service.

Custom Audiences: You agree that RentMate may utilize hashed versions (via SHA-256) of contact details to construct Custom Audiences and Lookalike Audiences on external advertising platforms (e.g., Google, Meta). You may opt out of this processing at any time by contacting customer service or updating your cookie preferences.

Unsubscribe Right: You may opt out of marketing communications at any time by clicking the unsubscribe link inside any message or emailing: info@rentmate.co.il.

Google OAuth Data Exclusion: For the avoidance of doubt, all data and permissions received via Google OAuth are strictly excluded from commercial sharing or advertising use.

3. Data Security, Cloud Sub-Processors, Cross-Border Data Transfers & AI Processing

Data Security & Cloud Infrastructure (Supabase): We implement enterprise-grade security controls and utilize managed cloud services provided by Supabase Inc. for encrypted database hosting, user authentication, CBS index synchronization, and file storage. Database access is strictly segregated using Row-Level Security (RLS) policies, ensuring that each user can access solely their own property and lease records. All telemetry and stored assets are encrypted in transit (SSL/TLS) and at rest.

Artificial Intelligence & Large Language Model (LLM) Processing: When you actively use smart analysis features or support channels (such as the AI Lease Scanner, Utility Bill Scanner, AI Assistant, or automated WhatsApp support assistant), the submitted document or inquiry text is processed via encrypted, enterprise-grade APIs of leading cloud Artificial Intelligence and Large Language Model (LLM) providers solely to generate the requested analysis or support response in real time. Your submitted data is not retained by third-party AI providers to train public models.

Authorized Cloud Sub-Processors: To deliver the Service, RentMate engages leading enterprise infrastructure sub-processors bound by strict security and confidentiality obligations: Supabase Inc. (encrypted database hosting, authentication, and RLS-segregated file storage); Google Cloud / Google Gemini API (encrypted enterprise API document analysis and automated support triage with zero public model training); Pulseem, Twilio Inc. & Meta Platforms / WhatsApp Business Cloud API (one-time SMS OTP verification delivery and operation of the official user-initiated WhatsApp support channel); Telegram Messenger Inc. (Telegram Bot API) (routing internal operational support alerts to our support team strictly under an anonymous ticket code, with prior scrubbing and masking so that names, phone numbers, email addresses, national IDs, and private attachments are never transmitted to Telegram servers); Resend Inc. (transactional system emails); and Apple, Google Play & RevenueCat Inc. (official app store entitlement management with zero payment card storage on RentMate servers).

Cross-Border Data Transfers Outside Israel: Our cloud infrastructure and technological sub-processors operate on secure data centers located outside the State of Israel (primarily within the European Union and the United States). All cross-border transfers and cloud storage are conducted in compliance with the Israeli Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001, utilizing jurisdictions and enterprise vendors that ensure an adequate level of data protection. By using the Service, you expressly consent to such transfer and hosting for service operation purposes.

4. User Rights and Data Deletion

You may update your profile details, delete uploaded files, or request the deletion of your account from our active servers at any time. Please note that account deletion removes your active user profile and property workspace from routine operation, subject to the retention of restricted evidentiary records, consent and unsubscribe proofs, and customer support transcripts in a locked archive strictly as required for legal defense, dispute resolution, or compliance with applicable law, as detailed in Section 5 below. You may also revoke the App's access to your Google Account at any time via your Google Security Settings.

5. Israeli Privacy Law Amendment 13 Compliance

RentMate strictly adheres to Amendment No. 13 to the Israeli Protection of Privacy Law, enforcing data minimization, transparency, and data subject rights:

• Privacy Officer & Contact: Our designated Privacy Officer is RentMate's Privacy Officer (Service Operator details in Section 7 below). For privacy inquiries or requests, contact us at info@rentmate.co.il or via WhatsApp at 055-9419550. Every inquiry is handled within the timeframe prescribed by law.
• Rights of Access and Rectification (Sections 13 & 14): You are entitled to review your personal data held in our databases, and to request correction or deletion of inaccurate, incomplete, unclear, or outdated data under Sections 13 and 14 of the Law.
• Data Retention & Deletion Policy: Personal data is retained strictly for the period necessary to fulfill the purposes for which it was collected (including active tenancy management and payment tracking) or to comply with applicable law. Sensitive rental candidate screening documents (such as ID copies and pay stubs uploaded for screening) are automatically purged by server automation within 14 days of application submission unless converted into an active tenancy contract, ensuring strict candidate privacy. Customer support correspondence transcripts (including WhatsApp support inquiries), consent proof records, and cancellation or unsubscribe confirmations are retained in a locked, access-restricted, and audit-logged evidentiary archive for quality control, inquiry verification, and legal defense in accordance with the limitation period under Israeli law (up to 7 years), whereas temporary media files and images attached to support inquiries are automatically purged from cloud storage within 90 days.
• Information Security & Risk Management: We comply with the Privacy Protection Regulations (Data Security), 2017, utilizing end-to-end TLS encryption, strict access segmentation, and proactive security event monitoring.

6. Cookies, Analytical Tools, Google Analytics & Microsoft Clarity

The platform utilizes cookies, Google Analytics (ID: G-60Q2JZKNC2), and Microsoft Clarity solely after obtaining Prior Informed Consent on our cookie banner. Full input masking (`mask_all_inputs`) is enforced to ensure no PII is captured. You may decline non-essential cookies at any time.