Privacy Policy

Effective date: September 7, 2026

This Privacy Policy explains how RentalFlow collects, uses, stores, and shares information when individuals and organizations use RentalFlow.

1. Information RentalFlow may process

RentalFlow may process information supplied by organization users, applicants, co-signers, and connected services. Depending on the features used, this may include names, email addresses, phone numbers, rental-group information, property information, application and lease workflow status, transaction-related information, uploaded documents, and organization settings.

2. Google user data and Gmail

When an organization connects Gmail to RentalFlow, RentalFlow may receive Google OAuth credentials and account-identifying information needed to maintain that connection and send email through the Gmail API.

RentalFlow uses Gmail access to send transactional emails on behalf of the connected organization, including rental application communications, approval notices, lease-related communications, reminders, and other organization-initiated messages.

RentalFlow does not use Google user data for advertising, profiling, or sale to third parties. RentalFlow does not use Google user data to train generalized artificial intelligence or machine-learning models.

RentalFlow's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How Google data is stored

OAuth credentials required to maintain organization integrations are stored in RentalFlow's backend systems. Access to organization integrations is scoped to the applicable RentalFlow organization. RentalFlow uses access controls intended to prevent one organization from accessing another organization's connected account information.

4. Sharing of information

RentalFlow may transmit information to service providers used to deliver requested functionality, such as Google for Gmail delivery, DocuSign for electronic-signature workflows, hosting providers, database providers, and other infrastructure vendors supporting RentalFlow.

RentalFlow does not sell Google user data or other personal information.

5. Data retention

RentalFlow retains information for as long as reasonably necessary to provide the service, maintain organization records, comply with legal obligations, resolve disputes, and enforce agreements. OAuth credentials may be removed or invalidated when an organization disconnects an integration or revokes access with the provider.

6. Organization responsibilities

Organizations using RentalFlow are responsible for their own communications, applicant relationships, data-entry practices, rental procedures, and compliance obligations. RentalFlow provides workflow software and does not make rental eligibility or housing decisions.

7. Security

RentalFlow uses technical and organizational safeguards designed to protect stored information, including organization-scoped access controls and authenticated backend services. No system can guarantee absolute security.

8. Your choices

Connected Google access can be revoked through the applicable Google Account. Organizations may also reconnect or disconnect supported integrations through RentalFlow's integration settings.

9. Changes to this policy

RentalFlow may update this Privacy Policy as the service changes. The effective date shown above will be updated when material changes are made.

10. Contact

Questions about this Privacy Policy should be directed to the RentalFlow support contact associated with the organization or to the support email shown on the Google authorization consent screen.