Privacy Policy

1. Introduction

Rentiwo, a product of Technoidslab Ltd, is committed to protecting the privacy of our users and the personal data of tenants managed through our Platform. This Privacy Policy explains what information we collect, how we use it, and your rights under the Uganda Data Protection and Privacy Act, 2019 (DPPA).

By using Rentiwo, you acknowledge that you have read and understood this Policy.

2. Information We Collect

2.1 Information you provide directly

• Account details: full name, email address, phone number, password (stored hashed — never in plain text)
• Property and unit information: addresses, property names, rent amounts, lease terms
• Tenant information: names, phone numbers, national ID numbers (if entered), due dates
• Payment records: amounts paid, payment dates, mobile money transaction references
• Expense records, caretaker assignments, and any notes you enter

2.2 Information collected automatically

• Log data: IP address, browser type, pages visited, actions taken, timestamps
• Device and session information
• Platform usage patterns (used for improving the service only)

2.3 Information from third parties

• Payment transaction status from MTN Mobile Money and Airtel Money APIs
• SMS delivery status from our SMS provider (Twilio)

3. How We Use Your Information

We use your information to:

• Create and manage your account and subscription
• Provide all Platform features including rent tracking, tenant management, and reporting
• Send automated SMS and email reminders to tenants on your instruction
• Generate reports and summaries of your property portfolio
• Process and display payment transactions
• Communicate with you about your account, billing, and Platform updates
• Detect and prevent fraud, abuse, and unauthorised access
• Comply with legal and regulatory obligations under Ugandan law

We do not use your data for advertising or sell it to any third party.

4. Tenant Data — Landlord Responsibilities

When you (a Landlord) enter your tenants' personal data into the Platform, you are acting as the data controller for that data under the DPPA. Rentiwo / Technoidslab Ltd acts as a data processor — we process tenant data only on your instructions.

As a Landlord, you are responsible for:

• Having a lawful basis (such as your tenancy agreement or tenant consent) for collecting and processing tenant personal data
• Informing your tenants that their data is being managed through a digital platform
• Ensuring tenant data you enter is accurate and kept up to date

5. Sharing of Information

We do not sell your personal data. We share data only in the following circumstances:

• SMS provider (Twilio): Tenant phone numbers and message content are transmitted to Twilio to deliver SMS reminders on your behalf
• Email delivery: Tenant email addresses may be used to send rent reminders via our email delivery service
• Mobile money providers (MTN, Airtel): Minimum data (phone number, amount) is shared to initiate and verify payment requests
• Hosting and infrastructure: Our cloud infrastructure provider processes data as part of operating the Platform, under contractual data protection obligations
• Legal obligations: We may disclose data when required by Ugandan law, a court order, or a legitimate regulatory authority
• Business transfer: If Technoidslab Ltd is acquired or merged, user data may transfer to the new entity with prior notice to you

6. SMS and Email Communications

When you trigger a reminder through the Platform, the tenant's contact details and a message generated from your rental data are sent to our third-party provider for delivery. We log the send status (sent, failed, delivered) to help you track communication history. Recipients may incur standard mobile carrier charges for SMS received.

7. Data Retention

Data type	Retention period
Active account and property data	While account is active
Data after subscription expiry / termination	90 days, then permanently deleted
Payment transaction records	Up to 7 years (Ugandan financial record-keeping obligations)
SMS and reminder logs	12 months
Server access logs	90 days

You may request earlier deletion of your data at any time (see Section 9).

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS) for all Platform traffic
• Passwords stored using bcrypt hashing — we never store plain-text passwords
• Role-based access controls (landlords cannot access other landlords' data)
• Regular security reviews of the Platform

In the event of a data breach likely to affect your rights under the DPPA, we will notify you as required by law.

9. Your Rights Under the DPPA

Under the Uganda Data Protection and Privacy Act, 2019, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention obligations)
• Objection: Object to certain types of processing of your data
• Data portability: Request your data in a structured, machine-readable format

To exercise these rights, contact us at privacy@technoidslab.com. We will respond within 21 days as required by the DPPA.

If you are a tenant whose data has been entered by a Landlord, contact that Landlord directly as they are the data controller. You may also contact us if you believe your data is being processed unlawfully.

10. Cookies

Rentiwo uses only essential session cookies required for authentication and Platform functionality. We do not use advertising, tracking, or analytics cookies. You can configure your browser to block cookies, but this may affect your ability to log in.

11. Children's Privacy

The Platform is intended for adults (18+) in a professional property management context. We do not knowingly collect data from persons under 18. Contact us immediately at privacy@technoidslab.com if you believe a minor's data has been collected.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform, and where required by the DPPA, your renewed acknowledgement will be sought.

13. Data Controller and Processor

Technoidslab Ltd (operating Rentiwo) is the data controller for all user account data. Landlords are independent data controllers for their tenants' personal data; Technoidslab Ltd acts as data processor for that data.

14. Contact and Complaints

Technoidslab Ltd — Privacy Team
432 Mengo Hill Road, Kampala – Uganda
Email: privacy@technoidslab.com

If you are not satisfied with our response, you have the right to lodge a complaint with the National Information Technology Authority – Uganda (NITA-U), which oversees data protection compliance under the DPPA.