מדיניות פרטיות

Last Updated: November 3, 2026

Prevailing Language: This English translation is provided for convenience. In the event of any discrepancy or interpretive conflict between the Hebrew text and the English translation, the Hebrew version shall prevail.

The RentMate application and service (hereinafter: "the App" or "the Service") is operated and managed by the Service Operator (as detailed in Section 7 at the bottom of this document; hereinafter: "Service Operator" or "RentMate"), the sole owner and rights holder of all intellectual property, assets, and brand rights. The Service Operator respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy outlines how we collect, use, and protect your information when you use our mobile application and related web services.

1. Information We Collect and How We Use It

Notice Pursuant to Section 11 of the Israeli Protection of Privacy Law, 1981: You are under no statutory obligation to provide any personal data, and any information you submit is provided voluntarily and with your consent in order to use the Service. However, without providing essential account details, we may be unable to deliver personalized rental management features.

We collect information to provide you with a smart, secure, and personalized rental management experience. This includes:

• Basic Profile Information: Your full name, email address, and profile picture, used to identify you and secure your account.
• Property and Lease Details: Property addresses, contract dates, rent amounts, payment terms, and index linkage preferences.
• Uploaded Documents: Lease contracts, handover protocols, utility bills (electricity, water, property tax), and meter photos that you choose to upload.
• Tenant Contact Information & Message Logs: If the Landlord utilizes tenant messaging links (One-Tap WhatsApp message links dispatched directly from the Landlord's personal device) or optional system notifications (in supported plans, subject to tenant Opt-in), we collect the tenant's phone number, consent status, and technical transmission logs for service operation, billing verification, and stability.
• Rental Applicant Data & Public Registry Checks: When submitting a rental application or verification documents, we collect the applicant's name, national ID number, contact details, employment/income details, and verification files (ID copy and payslips) shared with the Landlord and automatically purged after 14 days. Subject to applicant consent, Landlords may also query official publicly accessible Israeli government registries (Bank of Israel restricted accounts and Ministry of Justice insolvency registries via data.gov.il).
• User-Initiated WhatsApp Support Inquiries & Automated AI Triage: When you initiate an inquiry to RentMate's official WhatsApp support channel (055-9419550), your message content, sender phone number, and any attached media files are processed to provide an automated AI-powered initial response by RentMate's virtual support assistant and to escalate the inquiry to a human support representative when needed. Under strict data minimization controls, conversations resolved automatically remain sealed in a restricted, access-logged evidentiary archive rather than the routine support inbox, and any exceptional administrative review requires an explicit justification recorded in an immutable security audit log.
• Crash & Diagnostic Logs: In the event of an application error or crash, technical diagnostic data (error message, stack trace, device model, operating system version, and an anonymous technical identifier) is automatically collected solely for system reliability monitoring, real-time bug fixing, and data security. This diagnostic data is strictly sanitized and never contains financial details, personal documents, contact information, or passwords.

Admin Access & Operational Data Processing: The Service and its authorized system administrators (Admins) process and access user profile data, property details, lease contracts, and uploaded documents solely for the purposes of operating the Service, generating lease agreements and handover protocols, calculating CPI linkage, providing technical support and customer success services, ensuring data security, preventing fraud, and complying with legal obligations. All administrative access is subject to strict confidentiality and data protection obligations under applicable privacy laws.

2. Data Sharing, Direct Marketing, and Commercial Partnerships

Marketing Communications & Offers: Subject to obtaining your consent (including via checkbox consent or as outlined in the Terms of Service), RentMate may use your submitted contact information (such as name, email address, phone number) to send you newsletters, updates, marketing materials, and personalized promotional offers from RentMate and/or its business partners and third-party affiliates.

Partner Offers & Collaborations: These commercial offers may include complementary products and services, such as renter/landlord insurance, financial products, credit solutions, moving and storage services, home maintenance and repair services, legal consulting, and other products or services that we believe may be of interest to you.

Data Sharing Policy: RentMate does not sell, trade, or rent your personal contact information to third parties. All marketing communications on behalf of partners are dispatched directly by RentMate. Personally identifying data will only be shared with a partner if you explicitly interact with a partner offer or request the transfer of your details to receive services from that partner.

Custom Audiences: You agree that we may use hashed versions of your contact details (using secure one-way hashing algorithms like SHA-256) to build Custom Audiences, Lookalike Audiences, and optimize advertising campaigns on external media platforms (such as Google, Meta, TikTok, etc.). This use is subject to the user's consent to marketing cookies and/or commercial communications, and the user may opt out of this processing at any time by contacting customer support or adjusting cookie preferences on the website.

Opting Out: You may unsubscribe from marketing communications and direct mailing lists at any time by clicking the "Unsubscribe" link included in the footer of any promotional email, or by contacting our customer support in writing.

Google OAuth Data Exclusion: For the avoidance of doubt, all data, permissions, and information retrieved or collected through Google OAuth integration (including Google profile information) are strictly excluded from this section. This data is used solely to provide core app functionality and will never be shared, sold, or utilized for advertising, marketing, or profiling purposes.

3. Data Security, Cloud Sub-Processors, Cross-Border Data Transfers & AI Processing

Data Security & Cloud Infrastructure (Supabase): We implement enterprise-grade security controls and utilize managed cloud services provided by Supabase Inc. for encrypted database hosting, user authentication, CBS index synchronization, and file storage. Database access is strictly segregated using Row-Level Security (RLS) policies, ensuring that each user can access solely their own property and lease records. All telemetry and stored assets are encrypted in transit (SSL/TLS) and at rest.

Artificial Intelligence & Large Language Model (LLM) Processing: When you actively use smart analysis features or support channels (such as the AI Lease Scanner, Utility Bill Scanner, AI Assistant, or automated WhatsApp support assistant), the submitted document or inquiry text is processed via encrypted, enterprise-grade APIs of leading cloud Artificial Intelligence and Large Language Model (LLM) providers solely to generate the requested analysis or support response in real time. Your submitted data is not retained by third-party AI providers to train public models.

Authorized Cloud Sub-Processors: To deliver the Service, RentMate engages leading enterprise infrastructure sub-processors bound by strict security and confidentiality obligations: Supabase Inc. (encrypted database hosting, authentication, and RLS-segregated file storage); Google Cloud / Google Gemini API (encrypted enterprise API document analysis and automated support triage with zero public model training); Pulseem, Twilio Inc. & Meta Platforms / WhatsApp Business Cloud API (one-time SMS OTP verification delivery and operation of the official user-initiated WhatsApp support channel); Telegram Messenger Inc. (Telegram Bot API) (routing internal operational support alerts to our support team strictly under an anonymous ticket code, with prior scrubbing and masking so that names, phone numbers, email addresses, national IDs, and private attachments are never transmitted to Telegram servers); Resend Inc. (transactional system emails); and Apple, Google Play & RevenueCat Inc. (official app store entitlement management with zero payment card storage on RentMate servers).

Cross-Border Data Transfers Outside Israel: Our cloud infrastructure and technological sub-processors operate on secure data centers located outside the State of Israel (primarily within the European Union and the United States). All cross-border transfers and cloud storage are conducted in compliance with the Israeli Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001, utilizing jurisdictions and enterprise vendors that ensure an adequate level of data protection. By using the Service, you expressly consent to such transfer and hosting for service operation purposes.

4. User Rights and Data Deletion

You may update your profile details, delete uploaded files, or request the deletion of your account from our active servers at any time. Please note that account deletion removes your active user profile and property workspace from routine operation, subject to the retention of restricted evidentiary records, consent and unsubscribe proofs, and customer support transcripts in a locked archive strictly as required for legal defense, dispute resolution, or compliance with applicable law, as detailed in Section 5 below. You may also revoke the App's access to your Google Account at any time via your Google Security Settings.

5. Israeli Privacy Law Amendment 13 Compliance

RentMate strictly adheres to Amendment No. 13 to the Israeli Protection of Privacy Law, enforcing data minimization, transparency, and data subject rights:

• Privacy Officer & Contact: Our designated Privacy Officer is RentMate's Privacy Officer (Service Operator details in Section 7 below). For privacy inquiries or requests, contact us at info@rentmate.co.il or via WhatsApp at 055-9419550. Every inquiry is handled within the timeframe prescribed by law.
• Rights of Access and Rectification (Sections 13 & 14): You are entitled to review your personal data held in our databases, and to request correction or deletion of inaccurate, incomplete, unclear, or outdated data under Sections 13 and 14 of the Law.
• Data Retention & Deletion Policy: Personal data is retained strictly for the period necessary to fulfill the purposes for which it was collected (including active tenancy management and payment tracking) or to comply with applicable law. Sensitive rental candidate screening documents (such as ID copies and pay stubs uploaded for screening) are automatically purged by server automation within 14 days of application submission unless converted into an active tenancy contract, ensuring strict candidate privacy. Customer support correspondence transcripts (including WhatsApp support inquiries), consent proof records, and cancellation or unsubscribe confirmations are retained in a locked, access-restricted, and audit-logged evidentiary archive for quality control, inquiry verification, and legal defense in accordance with the limitation period under Israeli law (up to 7 years), whereas temporary media files and images attached to support inquiries are automatically purged from cloud storage within 90 days.
• Information Security & Risk Management: We comply with the Privacy Protection Regulations (Data Security), 2017, utilizing end-to-end TLS encryption, strict access segmentation, and proactive security event monitoring.

6. Cookies, Analytics, Google Tracking & Microsoft Clarity Disclosure

We use essential cookies and privacy-safe behavioral analytics services, including Google Analytics (Measurement ID: G-60Q2JZKNC2) and Microsoft Clarity. These tools gather aggregated, non-identifying telemetry (such as click maps, scroll heatmaps, session durations, and user interface responsiveness) to identify usability bottlenecks and optimize platform stability.

Privacy Protections & Strict Zero-PII Masking: In strict compliance with Amendment 13 to the Israeli Protection of Privacy Law and the GDPR, session recording and telemetry are loaded only after obtaining your prior informed consent via our cookie banner. Furthermore, our deployment enforces global strict masking (mask_all_inputs: true), ensuring that sensitive data—including phone numbers, rental figures, lease contracts, national IDs, and passwords—is obscured at the client side and never captured. You may opt out of behavioral recording at any time by declining non-essential cookies in our banner or via Microsoft's official opt-out portal at choice.microsoft.com.

Anonymous Mobile In-App Telemetry: In the mobile application, anonymous technical analytics and telemetry tools (such as Firebase Analytics and Mixpanel) operate using pseudonymous technical IDs only with zero transmission of email addresses or direct personal identifiers, solely to monitor crash stability and enhance app responsiveness. Users may toggle telemetry collection on or off at any time via the in-app Settings menu.