← Back to Rentalope

Privacy Policy

Last updated: September 30, 2026

This Privacy Policy explains how we collect, use, share, and protect information when you use the Service. By using the Service, you agree to this Policy. Related: our Terms of Service.


1. Roles: Operator vs renter data

  • You (the Operator) create an account and enter business records.
  • For your account and business data, we are the controller (we decide how that account data is processed to provide Rentalope).
  • For renters’ / customers’ personal information that you enter (names, addresses, phones, emails, payment-related identifiers you store, etc.), you are the controller and Rentalope is the processor — we process that data only to provide the Service to you, on your instructions.

You are responsible for providing any notices and obtaining any consents required for your renters and customers.


2. Information we collect

2.1 Account information

Name, email, business/company name, phone (if provided), password (stored hashed), authentication session data, and similar account fields.

2.2 Operator business data

Inventory/units, customers, rentals, tasks, notes, photos you upload, documents/PDFs, preferences (timezone, tax settings, billing description, etc.), setup checklist progress, and similar records you create.

2.3 Renter / customer PII you enter

Personal information about your renters and contacts that you choose to store in Rentalope. We do not independently collect renter card numbers.

2.4 Stripe — two different paths

  1. Plan billing (our platform Stripe account): if you subscribe to a paid plan, Stripe processes your subscription payment. We store Stripe customer/subscription identifiers and subscription status needed to provide the paid tier. Card numbers are handled by Stripe-hosted surfaces — we do not store full card numbers.
  2. Your Stripe (operator-owned keys): if you connect a restricted API key so renters can pay you, we store the key encrypted at rest, show only limited metadata (for example last-four / connection status), and use the key only to perform actions you initiate in the product. Renter payment-card data is handled by Stripe, not stored by Rentalope as card PANs.

2.5 AI / MCP audit log

When you use Lope or a connected AI client, we may log tool invocations such as tool name, arguments, results/status, timestamps, and related audit fields (McpToolLog and similar). Logs support security, undo/receipt features, abuse prevention, and support.

2.6 Attribution and product analytics

First-touch marketing attribution you or your browser provide (UTM parameters, affiliate/via codes, referrer, landing path), optional “how did you hear” answers, and standard technical logs (IP address, browser/device, pages requested). We may use cookies or similar technologies for authentication and analytics.

2.7 Communications

Support emails and transactional emails (welcome, payment failed, receipts you trigger, etc.).

We do not knowingly collect information from children under 13. The Service is for business operators.


3. How we use information

  • Provide, secure, and maintain the Service, including Lope
  • Authenticate users and isolate Operator tenants
  • Process paid-plan subscriptions and entitlements
  • Act on your Stripe account only as you direct via connected keys
  • Send transactional and service emails
  • Attribute referrals/affiliates where you arrived via tracked links
  • Debug, prevent fraud/abuse, and comply with law
  • Improve the Service using aggregated or de-identified insights where practical

We do not sell your personal information.
We do not use Operator Data to train foundation AI models. If that ever changes, we will update this Policy and obtain any required consent.


4. AI data flow (read this if you connect Claude, ChatGPT, or similar)

Rentalope does not send your business data to Anthropic, OpenAI, or other AI providers on its own initiative for model training or silent background sync.

When you connect an AI client to Rentalope and take actions in that client, relevant data may flow to that AI provider under that provider’s terms and privacy policy, in response to requests you (or your authorized users) make. You choose whether to connect a provider and what you ask it to do.

In-app Lope features that call AI on our infrastructure (if enabled for your account) process prompts/results as needed to fulfill your request; we still do not sell that data or use it to train third-party foundation models.


5. Sharing / subprocessors

We share information only as needed to run the Service:

Subprocessor Role
Fly.io Hosting / infrastructure (US-oriented deployment)
Stripe Subscription billing to Operators; also your chosen processor when you connect your own Stripe for renters
Brevo Transactional email
AI providers (e.g. Anthropic, OpenAI) Only when you connect them or use features that invoke them for your requests

We may also share information with professional advisors under confidentiality, or when required by law, legal process, or to protect rights, safety, and security.


6. Security

We use industry-standard measures including HTTPS, hashed passwords, tenant isolation, and encryption of Stripe restricted keys at rest. No method of transmission or storage is 100% secure.


7. Retention and deletion

We retain account and business data while your account is active.

If you request account deletion or we terminate the account, we will delete or anonymize Operator Data within a commercially reasonable period (target 30 days), except where law requires longer retention or data remains briefly in backups.

Disconnecting Stripe keys deletes or disables our ability to use those keys; it does not automatically erase historical business records.

Audit logs may be retained for a limited period for security and dispute resolution.


8. Your rights and choices

Depending on applicable law, you may request access, correction, or deletion of personal information we hold about you as an Operator contact, by emailing support@rentalope.com.

You can update much account data in-product. You control renter data you entered; you may edit or delete those records subject to your own legal retention duties.

You may disconnect AI clients and revoke Stripe keys in-product (or in the provider’s dashboard).

You can control cookies via browser settings; essential auth cookies are required for the logged-in Service.


9. International users

We primarily serve U.S. Operators. Data is processed in the United States (and potentially other locations where our subprocessors operate). We do not currently appoint an EU/UK GDPR representative; if you operate from the EEA/UK, contact us before uploading personal data so we can assess fitness.


10. Changes

We may update this Policy. We will post the new version with an updated date and provide reasonable notice for material changes.


11. Contact

Vance Technology LLC
Email: support@rentalope.com
Web: https://rentalope.com

For privacy requests, use the same email with subject “Privacy request.”


© Rentalope. All rights reserved. | Terms of Service | Home