Privacy Policy
Last updated October 29, 2026
This policy explains what RenTrade, Inc. (“RenTrade,” “we,” “us”) collects when you visit rentrade.io, scan one of our QR codes or join our waitlist; how we use it and who we share it with; how long we keep it; and the rights and choices you have. It covers rentrade.io and nothing else.
What we collect
When you join the waitlist
- Your mobile phone number, and when you entered and verified it.
- Your first name and email address, if you give them.
- Your answers to our questions, such as how much you might consider investing. Answers are non-binding: they are not an offer, a commitment or a reservation, and we accept no money through the waitlist.
- What you agreed to about being contacted: the wording you saw, when you agreed, and the IP address and browser you agreed from.
- Every version of your name and email you give us, so a correction keeps what it replaced.
- A random code for your share link, so we can count visits that arrive through it.
- A record of each step you take: when, whether it worked (for example, a code entered wrong), your IP address and the approximate location worked out from it, and your browser and device.
When you visit the site
- A random visitor identifier and session identifier, kept in cookies.
- The pages you view, which parts of a page you reach, and what you click: the kind of element and its label. We never record what you type into a form, and in the waitlist sign-up we record no labels at all, only which step you are on. Once you verify your number, we connect this activity to your waitlist entry.
- How you arrived: the site that linked you, campaign tags in the link, ad click identifiers, whether you came from a RenTrade QR code, and the code of the share link you followed, if any.
- Your IP address, and the approximate location our hosting provider works out from it: country, region, city, postal code, approximate coordinates and time zone. This is not your device’s precise location, which we never ask for.
- Your device and browser: device type, operating system, browser and its full user agent string, language settings, time zone, screen and window size, pixel density, display preferences such as dark mode and reduced motion, touch support, processor cores and memory, network connection type and speed, and whether your browser is being driven by automation software.
When you scan a RenTrade QR code
The time of the scan, the address the code points to, your browser and your approximate location (country, region and city). Unless your browser sends a Global Privacy Control signal, we also record your IP address, the finer location worked out from it, your language settings, and the visitor identifier we set.
The email form on our home page
If you give your email address through the form on our home page, it is stored in a Google Sheet through Google Apps Script.
Where it comes from
From you, from your browser and device as you use the site, and from the service providers below: our hosting provider works out your approximate location from your IP address, and our sign-in and bot-check providers tell us whether a step succeeded. We do not buy information about you from anyone.
How we use it
- To run the waitlist: verify your number, keep your place, and contact you about RenTrade.
- To understand how people find and use the site, and to improve it.
- To measure interest in RenTrade. We may share aggregated statistics that do not identify you, such as how many people joined, with people considering financing our company.
- To keep the site and the waitlist secure: to prevent fraud, abuse, automated sign-ups and duplicate entries, and to keep the waitlist’s numbers honest.
- To keep a record of what you agreed to, and to meet our legal obligations.
Who we share it with
These service providers process information for us, only to provide their service:
- Vercel hosts the site and handles every request to it, including your IP address.
- Supabase stores our data and runs phone sign-in. To limit abuse of sign-in, it receives your IP address when you ask for or enter a code, and keeps it with your sign-in.
- Twilio sends the verification text, so it receives your phone number.
- Cloudflare Turnstile checks that a real person is joining, using signals from your browser and device.
- Google serves a font on our home page, which means it receives your IP address, and stores entries from the home page’s email form.
We may also disclose information when the law requires it, to respond to legal process, to protect our rights, our users or others’ safety, or as part of a merger, acquisition, financing or sale of our business, where the information would remain subject to this policy.
We do not sell your personal information. We do not share it for advertising based on your activity across other sites and apps, we use no third-party advertising or analytics trackers, and we do not share it with others for their own marketing. If we ever begin to, we will update this policy first and give you a way to opt out.
Text messages
When you enter your phone number, we text you a one-time verification code. We send other texts, such as a note when the first listing opens, only if you separately agree, and agreeing is never a condition of joining. You can reply STOP to any of those to stop them, or HELP for help. Message and data rates may apply. We never send unsolicited texts or emails, and we never sell or rent your number.
Cookies
We set these cookies, all first-party and none for advertising. You can block or delete cookies in your browser; the site still works, but we cannot keep you signed in to the waitlist without rt_auth.
| Cookie | What it holds | How long |
|---|---|---|
rt_vid | A random identifier for your browser | 1 year |
rt_sid | A random identifier for this visit | 30 minutes after your last activity |
rt_src | That you arrived from a RenTrade QR code | 10 minutes |
rt_auth | Your sign-in, set by Supabase’s sign-in service once you verify your number. Your browser’s scripts cannot read it. A long sign-in may be split into rt_auth.0, rt_auth.1 and so on. | 1 year |
Global Privacy Control and Do Not Track
If your browser sends a Global Privacy Control signal, we treat it as a request to opt out, and we collect no analytics about your visit: no analytics cookies, no record of what you view or click, and no IP address or device details. A QR code scan is still counted, with only its time, your browser and your approximate location. If you join, we still keep what you give us, the record of each step and the sign-in cookie, because the waitlist and its security need them.
Browsers can also send a “Do Not Track” signal. There is no common standard for it, so we do not change what we do when we receive it. We do not track you across other sites in any case. Global Privacy Control, above, is the signal we honor.
How long we keep it
- Your waitlist information, while the waitlist and RenTrade’s offering run, or until you ask us to delete it.
- What you agreed to and the record of each step, for as long as we may need to show what you agreed to and when, and as the law requires, even after you ask us to stop contacting you.
- Analytics, for as long as it helps us understand how the site is used.
- Statistics that do not identify anyone, which may be kept indefinitely.
Your rights and choices
Wherever you live in the United States, you can ask us to:
- tell you whether we hold information about you, and give you a copy of it, in a form you can take elsewhere;
- correct information that is wrong;
- delete it, except what we must keep to meet a legal obligation or to show what you agreed to;
- stop texting or emailing you (reply STOP to a text, or email us).
Some state laws give these rights only to their residents, and only against larger companies. We give them to everyone. We will not treat you differently for using them.
How to ask
Email privacy@rentrade.io. To protect your information, we confirm a request comes from you before we act on it, usually by texting a code to the phone number on your waitlist entry. Someone you authorize may ask for you, with your signed permission, and we may still confirm the request with you. We answer within 45 days. If we need longer, we will tell you why within those 45 days and answer within 45 more.
Appeals
If we turn down your request, you can appeal by emailing privacy@rentrade.io with “Appeal” in the subject. We will answer within 45 days and explain our decision. If you disagree with it, you can contact your state’s attorney general.
California residents
In the last 12 months we have collected these categories of personal information, from the sources and for the purposes above. We disclose each only to the service providers above. We have not sold any of it or shared it for cross-context behavioral advertising.
| Category | What it covers here |
|---|---|
| Identifiers | Phone number, name, email address, IP address, cookie identifiers, share-link code |
| Customer records | Phone number, name and email address |
| Internet or network activity | Pages viewed, sections reached, clicks, how you arrived, device and browser details |
| Geolocation | Approximate location worked out from your IP address, never your device’s precise location |
| Other information you give us | Your answers to our questions, and what you agreed to |
We do not collect sensitive personal information as California law defines it. Under California’s “Shine the Light” law you may ask which personal information we disclosed to others for their direct marketing: we disclose none.
Security
We keep your information in a database that browsers cannot reach, encrypt it in transit and at rest, and limit who can access it. No method of storing or sending information is completely secure, so we cannot promise absolute security.
Children
The site is not meant for anyone under 18, and we do not knowingly collect information from them. If you believe a child has given us information, email privacy@rentrade.io and we will delete it.
For people outside the United States
RenTrade is for people in the United States: the waitlist takes US phone numbers only. We store and process information in the United States.
Changes to this policy
When we change this policy, we post the new version here with a new date. If a change is significant and we have a way to reach you, we will tell you before it takes effect.
Contact
RenTrade, Inc.
privacy@rentrade.io