Legal
Privacy Policy
Effective from On publication
1. Who We Are
2. Data We Collect
When you use RentSnagr, we collect the following:
Information you give us
Your full name and email address (required to deliver your Report)
Your mobile number (optional)
The property address and any tenancy reference (such as Ejari) you choose to enter
Your move-in or move-out date and property type
The photographs you capture, plus any titles, notes, severity ratings, and overall condition ratings you add
Whether you opted in to marketing emails
Information collected automatically
Technical data such as your IP address, browser user-agent, and the time of each action — used for security and fraud prevention, and to record consent
EXIF metadata embedded in your photographs, including the time the photo was taken and (where present) GPS coordinates and camera model — used to make the Report tamper-evident
A SHA-256 hash of each photograph, computed server-side so that the Report can prove the file hasn't been altered after upload
Payment information
Payment card details are collected and processed by our payment partner Telr. We never see or store your full card number. We retain only a transaction reference for reconciliation.
3. Why We Use Your Data
To deliver the Service — generate your Report, email it to you, and store it so you can re-download it.
To take payment — process and reconcile your purchase through Telr.
To support you — respond to your questions and resolve disputes.
To protect the Service — detect fraud, abuse, and unauthorised access, and comply with applicable law.
To send you marketing — only if you have explicitly opted in. You can withdraw consent at any time by replying to any email from us or by writing to sbluey18@gmail.com.
4. Legal Basis
Performance of a contract with you (delivering your Report).
Your consent (for marketing emails).
Our legitimate interests in running and protecting a secure service (fraud prevention, security logs).
Compliance with legal obligations where applicable, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
5. Who We Share It With
Supabase — hosting of database records and your photograph files.
Telr — payment processing.
Resend — outbound email delivery (including your Report).
Vercel — application hosting and request logging.
6. International Transfers
7. How Long We Keep Your Data
Your Report and the photographs in it are retained indefinitely so you can re-access them as evidence in any future dispute. You can ask us to delete them at any time (see Your Rights below).
Payment transaction references are retained for at least 7 years to comply with UAE tax and accounting requirements.
Marketing consent records (including the IP address and time at which you opted in) are retained for as long as we send you marketing emails, and for 12 months after you unsubscribe.
Abandoned sessions that never result in a paid Report are deleted automatically after 7 days.
8. Your Rights
access the personal data we hold about you;
correct any inaccurate or incomplete data;
request deletion of your data (this will also remove your Report);
restrict or object to certain processing;
receive your data in a portable format;
withdraw your consent at any time (this does not affect any processing already done on the basis of your prior consent);
lodge a complaint with the UAE Data Office (or, where applicable, your local data protection authority).