Privacy Policy — RentDraft

      The short version: We collect only what we need to generate your document. We don't store your personal details after PDF generation. We never sell your data. We never collect Aadhaar, PAN, or bank details.
    

1. Who We Are

RentDraft ("Platform", "we", "us", "our") is a document automation tool that generates rental agreement documents based on user-provided information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Platform.

This policy complies with the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

2. Information We Collect

2.1 Information You Provide (Document Generation)

When you use RentDraft to generate a rental agreement, you provide:

Names of landlord and tenant(s)
Property address
City and state
Monthly rent and security deposit amounts
Agreement duration and start date
Custom clause requests (if any)

This information is used solely to generate your document and is not stored on our servers after your PDF is generated and delivered.

2.2 Account & Contact Information

Email address — to deliver your PDF and purchase receipt
Waitlist email — if you join our waitlist (stored until you unsubscribe)

2.3 Payment Information

Payments are processed by Razorpay. We do not collect, store, or have access to your credit/debit card numbers, UPI IDs, or bank account details. Razorpay is PCI DSS compliant and handles all payment security. We receive only:

Transaction ID
Payment status (success/failure)
Amount paid
Payment method type (UPI, card, wallet — not the actual details)

2.4 Automatically Collected Information

Analytics data — page views, button clicks, referral source (collected via privacy-friendly analytics; no personal identifiers)
Device information — browser type, operating system, screen size (for compatibility and debugging)
IP address — used for session management only; not stored beyond the session unless required for fraud prevention

We NEVER collect: Aadhaar numbers, PAN numbers, bank account details, passwords, biometric data, caste, religion, political affiliation, or health information. Our forms are designed to never request this data.

3. How We Use Your Information

Data	Purpose	Retention
Agreement details (names, address, rent)	Generate your PDF document	Purged immediately after PDF generation
Email address	Deliver PDF, send receipt, support	Until you request deletion
Transaction records	Invoicing, refunds, tax compliance	8 years (as required by Indian tax law)
Document metadata (state, city, document type)	Service improvement, analytics	8 years (anonymized — no personal content)
Consent records	Legal compliance	8 years
Analytics data	Improve the Platform	24 months

We do not use your data for:

Marketing to you (unless you opt in to our newsletter)
Selling or renting to third parties
Profiling or automated decision-making
Training AI models (Anthropic's API does not train on API inputs by default)

4. Data of Non-Users (Third Parties)

When you generate an agreement, you enter information about the other party (landlord or tenant) who has not directly interacted with RentDraft. Regarding this data:

By submitting their information, you confirm that you have the right to provide it for the purpose of generating the agreement.
We use this data only for document generation — never for marketing, analytics, or any other purpose.
This data is purged immediately after PDF generation, along with all other agreement details.

5. Third-Party Processors

Your data may be processed by the following third-party services in order to operate the Platform:

Service	Purpose	Data Shared
Anthropic (Claude API)	AI-powered document generation	Agreement details (names, address, terms) — processed in memory, not stored by Anthropic for training
Razorpay	Payment processing	Payment details (handled entirely by Razorpay)
Vercel	Website hosting	Web traffic, IP addresses (server logs)
Supabase	Transaction logging	Transaction metadata (anonymized)
Resend	Email delivery	Email address, PDF attachment
Umami / Vercel Analytics	Website analytics	Anonymized usage data (no personal identifiers)

Each of these services has their own privacy policies. We encourage you to review them.

6. Data Security

We implement reasonable security practices including:

Encryption in transit — all data transmitted via HTTPS/TLS.
Minimal data retention — agreement details are purged immediately after PDF generation.
No sensitive data storage — we never store Aadhaar, PAN, card numbers, or bank details.
Access controls — only authorized personnel can access transaction logs.
Razorpay PCI DSS compliance — payment data is handled by PCI DSS Level 1 certified infrastructure.

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security of your information.

7. Cookies

RentDraft uses minimal cookies:

Essential cookies — required for the Platform to function (session management, payment flow). These cannot be disabled.
Analytics cookies — used by our analytics tool to understand usage patterns. These are anonymized and do not identify you personally.

We do not use advertising cookies, tracking cookies, or third-party marketing cookies.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Platform from functioning correctly.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the right to:

Right	Description	How to Exercise
Access	Request a copy of your personal data we hold	Email us
Correction	Request correction of inaccurate data	Email us
Deletion	Request deletion of your personal data	Email us
Withdraw consent	Withdraw consent for data processing	Email us
Grievance	File a complaint about data handling	Contact Grievance Officer
Nominate	Nominate a person to exercise rights on your behalf (in case of death/incapacity)	Email us

We will respond to all data requests within 30 days.

Note: We cannot delete transaction records required by tax law (retained for 8 years), but we can delete all other personal data associated with your account.

9. Children's Privacy

RentDraft is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has used our Platform, please contact us and we will promptly delete their data.

10. Data Transfers

Your data may be processed by third-party services (Anthropic, Vercel) whose servers are located outside India. By using the Platform, you consent to this transfer. These services maintain appropriate data protection standards.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights:

We will notify affected users via email within 72 hours of becoming aware of the breach.
We will notify the Data Protection Board of India as required under DPDPA 2023.
We will provide details of the breach, data affected, and remedial steps taken.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on this page with a revised "Last updated" date.
Sending an email notification for significant changes (if we have your email).

Your continued use of the Platform after changes constitutes acceptance of the revised policy.

13. Grievance Officer

In accordance with the Information Technology Act, 2000, and the DPDPA 2023:

Grievance Officer
Email: support@rentdraft.in
Response time: Within 30 days of receipt.

If you are unsatisfied with our response, you may file a complaint with the Data Protection Board of India.

14. Contact Us

For any questions about this Privacy Policy or our data practices:

Email: support@rentdraft.in