Legal

Privacy Policy

Effective date: June 15, 2026  ·  Last updated: June 15, 2026  ·  Draft v1
Draft for legal review. This Privacy Policy is a working draft and is currently undergoing review by qualified legal counsel prior to MyRental.pro being made generally available. The substance accurately reflects how the platform handles data today. Specific language, jurisdiction coverage, and statutory citations are subject to refinement.

1. Who We Are

MyRental.pro ("MyRental") is a multi-tenant property management software platform operated from Omaha, Nebraska. The Platform provides tools used by property management companies and landlords ("Clients") to manage properties, units, leases, residents, applicants, vendors, maintenance work orders, payments, and related operations. Inquiries concerning this Policy may be directed to hello@myrental.pro.

2. Scope of This Policy

This Privacy Policy describes how MyRental collects, uses, retains, and shares information in connection with the Platform, including the web application at myrental.pro and all related services. It applies to:

Controller and processor. For Client Administrator data (account details, billing, subscription history), MyRental is the data controller. For Resident, Applicant, and Vendor data entered into the Platform by a Client, MyRental acts as the data processor on behalf of the Client; the Client is the controller. Resident inquiries concerning a Client's handling of personal information should be directed to that Client. Where applicable state law uses different terminology (such as "business" and "service provider"), those concepts map to controller and processor respectively.

3. Information Collected

Account and contact information. When a Client establishes an account, MyRental collects the company name, administrator name, work email, phone number, billing address, and subscription tier. When staff accounts are created, MyRental collects name, email, role, and hashed login credentials.

Resident and applicant information. Clients enter Resident and applicant data into the Platform. This may include name, email address, phone number, date of birth, emergency contact information, household composition, lease terms, rent ledger, payment history, prior addresses, employment information, and identification documents uploaded by the Client. Such data is provided by the Client and processed on the Client's behalf.

Payment information. Subscription billing and rent collection are supported through two pathways:

ACH enrollment records and payment-ledger records are retained consistent with Section 8.

Communications. The Platform supports in-portal messaging between Clients, Residents, and Vendors, and outbound email and (optional) SMS notifications. Message content, timestamps, sender, recipient, and read/unread status are stored.

Files and documents. Clients and Residents may upload documents and files in connection with use of the Platform. Files are stored in encrypted form.

Usage and technical data. The Platform collects technical information generated by use of the service (including IP address and timestamps) and maintains application logs of authentication, administrative, and payment events for security, troubleshooting, and audit purposes.

Compliance and legal records. Records, signature events, and audit trails generated by Client use of document and compliance features are stored.

4. How Information Is Used

Information collected through the Platform is used to:

MyRental does not sell or share personal information for advertising purposes and does not use Resident or applicant data for marketing. See Section 12 for the formal "Do Not Sell or Share" notice.

5. Cross-Company Resident Data

The Platform enforces isolation of resident records between Clients. Each Client has access only to records associated with that Client, including in cases where the same individual is a resident of more than one Client on the Platform.

Where the same individual is a resident of more than one Client, that individual's records at each Client — including messages, payment ledger, lease documents, and internal notes — remain fully separated.

6. Sub-Processors

MyRental engages the following third-party service providers ("sub-processors") to operate the Platform. Each is bound by appropriate data-protection commitments via contract.

This list reflects MyRental's active sub-processor inventory. Material additions or changes will be announced via in-product notice and email to active Clients prior to taking effect, where reasonably possible.

7. Information Sharing

Information is shared only as necessary to operate the Platform:

Personal information is not shared, leased, or sold to data brokers, advertising networks, or other landlords.

8. Data Retention and Deletion

Default retention. Account, lease, payment, work-order, and communication records are retained for the duration of a Client's active subscription and for a configurable retention window after a lease ends. The default retention window is seven (7) years following the end of the relevant lease. Clients may request a different retention window where permitted by law.

Current status of automated deletion. The Platform includes infrastructure to identify retention-eligible records and produce a deletion report. Automated deletion is not yet active; records past the retention window are retained pending operational review. When automated deletion is enabled, this Section will be updated and active Clients will be notified.

Scope of deletion. When deletion runs, eligible Resident records and associated documents, messages, payments, and work orders are removed from production systems. Aggregated, de-identified usage data and audit-log entries describing administrative actions may be retained for security and compliance purposes.

Backups. Recent records may persist in encrypted backups for a limited period after deletion from production systems. Backups are purged on the standard rotation schedule and are not used for routine access.

Client-initiated deletion. A Client may request deletion of the Client's account and associated records at any time by contacting hello@myrental.pro. Resident-initiated requests are routed to the responsible Client; see Section 11.

9. Legal Hold

The Platform supports per-Resident, per-lease, and per-company legal-hold flags. A record under legal hold is excluded from retention-driven deletion and preserved for the duration of the hold. Legal hold may be set by the responsible Client or by authorized MyRental personnel in response to legal process. The setting of a hold, the responsible party, and the reason are recorded in the audit log.

10. Audit Logging

The Platform maintains an immutable audit log of administrative and read events affecting Resident, lease, payment, document, and legal-hold records. The audit log supports security investigations, dispute resolution, legal discovery, and demonstrating compliance with this Policy. Audit log entries are retained for the same period as the underlying records, plus an additional preservation window where required by law.

11. Privacy Rights

Residents of certain U.S. jurisdictions are afforded rights with respect to their personal information, including:

Coverage. These rights derive from laws including the California Consumer Privacy Act as amended by the CPRA; the Virginia Consumer Data Protection Act; the Colorado Privacy Act; the Connecticut Data Privacy Act; the Utah Consumer Privacy Act; the Texas Data Privacy and Security Act; the Oregon Consumer Privacy Act; and analogous statutes in Iowa, Indiana, Tennessee, Montana, Delaware, New Hampshire, and New Jersey as they take effect. MyRental honors verifiable requests from residents of any U.S. state and applies consistent standards across jurisdictions where practical.

Exercising rights. Residents should first contact the responsible Client, who serves as controller of Resident records and is generally best positioned to respond. Where the Client cannot be reached, requests may be submitted to hello@myrental.pro. MyRental will route the request appropriately and respond within forty-five (45) days, extendable once where permitted. Identity verification may be required prior to fulfillment. An authorized agent may act on behalf of a Resident, subject to verification.

Appeal. Certain state laws provide a right to appeal a denial of a privacy request. Appeals should be directed to hello@myrental.pro with "Privacy appeal" in the subject line and will be addressed within sixty (60) days. A denied appeal may be brought to the relevant state attorney general.

12. "Do Not Sell or Share" Notice

MyRental does not sell personal information. "Sell" is used in the broad sense of the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, and analogous statutes, including the exchange of personal information for monetary or other valuable consideration. MyRental does not share personal information for cross-context behavioral advertising and does not engage in targeted advertising of any kind. No "Do Not Sell or Share My Personal Information" link is functionally required in the absence of such activity. This Section affirms the policy.

13. Security

MyRental implements administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include:

No method of transmission or storage is one hundred percent secure. MyRental does not guarantee absolute security.

14. Data Breach Notification

Where MyRental determines that a security incident has resulted in unauthorized acquisition or unauthorized use of personal information, notification will be provided to affected Clients. Where the Client is the controller, the Client is expected to notify affected Residents. Where MyRental is the controller, MyRental will notify affected individuals directly. Notification will be made without unreasonable delay and consistent with applicable law, which in many U.S. states requires notice within thirty (30), forty-five (45), or sixty (60) days of discovery. Notice may be delayed where requested by law enforcement, as permitted. Where required, MyRental will also notify state attorneys general and consumer reporting agencies.

15. Communications and Opt-Out

Communications with Clients and staff. Account-management messages are essential to operation of an account and cannot be opted out of while an account remains active. Cancellation of the subscription terminates these communications.

Communications with Residents. Resident-facing notifications support the Client's management of the lease. Notification emails include an unsubscribe link; opting out removes the address from future notification communications. Security-critical and life-safety messages cannot be opted out of separately. Re-subscription via the unsubscribe link is not available for addresses removed because of prior delivery failure or formal abuse reports; in those cases the address remains suspended pending support intervention.

16. Cookies and Local Storage

The Platform uses browser localStorage to store the session token required for authentication and a limited number of strictly necessary session cookies for the same purpose. Advertising cookies, third-party analytics cookies, social-network tracking pixels, and fingerprinting technologies are not used. No cookie is set for any purpose other than maintaining an authenticated session.

17. Children's Privacy

The Platform is a business-to-business service not directed to children under 13. MyRental does not knowingly collect personal information from children. Use of the Platform by minors is not intended; Clients should not enter information about minor Residents beyond what is strictly required for lease administration. Where MyRental learns that personal information of a child under 13 has been collected, the information will be deleted.

18. International Users

The Platform is operated from the United States and is intended for use by U.S.-based Clients and Residents. Access from outside the United States results in transfer, storage, and processing of personal information in the United States. The Platform is not designed, supported, or offered for processing personal information of European Union, United Kingdom, or other foreign-jurisdiction residents subject to specialized data-protection regimes (including the GDPR and the UK GDPR). A Client that elects to process such personal information through the Platform in contravention of this Section does so in violation of this Policy and the Terms of Service and remains solely responsible for all resulting legal consequences.

MyRental does not provide data-protection compliance guidance for any jurisdiction. The Platform is provided AS-IS and without warranty of fitness for any particular regulatory, legal, or compliance purpose. Clients should consult their own legal counsel regarding applicable data-protection obligations.

19. Changes to This Policy

MyRental may update this Policy from time to time to reflect changes in practices, the Platform, or applicable law. Material updates will be reflected in the "Last updated" date at the top of this Policy and notified to active Clients through in-product notice or email. Where the change materially expands the categories of information collected or the uses of that information, reasonable advance notice will be provided before the change takes effect. Continued use of the Platform after the effective date of an update constitutes acceptance of the updated Policy.

20. Contact

MyRental.pro
Omaha, Nebraska
hello@myrental.pro

Privacy-related requests should include "Privacy request" in the subject line to ensure prompt routing.