Privacy Policy

1. Data Controller

Tiago Eugénio André, Portuguese tax ID (NIF) 220466408

Olhão, Portugal

Email for privacy matters: rentflowportugal@gmail.com

2. Legal Basis for Processing

We process your personal data only when a valid legal basis exists under the GDPR. The legal bases we rely on are:

3. Your Rights (Data Subject Rights)

Under the GDPR you have the following rights regarding your personal data:

To exercise any of these rights, contact us at rentflowportugal@gmail.com. We will respond within 30 days.

4. Right to Lodge a Complaint with the Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese data protection authority:

Comissão Nacional de Proteção de Dados (CNPD)

Address: Av. D. Carlos I, 134 — 1.º, 1200-651 Lisboa, Portugal

Website: www.cnpd.pt

5. Sub-Processors and International Transfers

We engage third-party sub-processors that may process your data on our behalf. All sub-processors are contractually bound to comply with the GDPR.

Google Firebase (Firestore, Authentication, Hosting) — cloud infrastructure provider. Data may be stored in the EEA or transferred to jurisdictions deemed adequate by the European Commission.

International transfers are governed by Standard Contractual Clauses (SCCs) adopted by the European Commission to ensure an equivalent level of protection.

6. Data Retention Periods

We retain your data only for as long as necessary to fulfil the purposes for which it was collected. Concrete retention periods are:

7. Your Responsibility for Tenant Data

As the account holder, you act as the data controller for any personal data you enter about your tenants or other individuals. RentFlow processes this data only on your behalf as a data processor.

You are responsible for obtaining the necessary consent or legal basis before entering personal data of third parties into the platform, and for responding to their data subject requests.

8. Analytics Cookies and Website Measurement

We use Google Analytics to understand how people find RentFlow and which pages are useful to them. This measurement happens only on the public pages of the site: home, login, registration, terms, privacy and frequently asked questions.

These cookies are only set after you accept them. Nothing is collected before that, and declining does not limit your use of the application in any way — RentFlow works fully either way.

The legal basis is your consent, which you can withdraw at any time through the cookie settings in the site footer.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or operational improvements. The 'Last updated' date at the top of this page indicates the latest revision.

Material changes will be communicated by email to the address associated with your account and/or via a notice in the app upon your next login.

We encourage you to review this policy periodically.

10. Third-Party Attestation and Bot Protection

To protect RentFlow against automated abuse, we use Firebase App Check and, where applicable, a reCAPTCHA widget. When you visit or sign in to the service, these tools may process limited attestation data — such as device and interaction signals — to verify that requests come from genuine users.

This processing is carried out by Google LLC as our processor. The reCAPTCHA Terms of Service and Google's Privacy Policy apply. Data is processed to ensure the security and integrity of the service and is retained only for as long as necessary for that purpose.