Privacy Policy

1. Information We Collect

We collect only the information necessary to verify rental listings, improve data accuracy, and provide a secure, transparent rental platform. This may include:

• Account Information: such as your email address and authentication provider details when you sign in.
• Verification Data: including uploaded documents (e.g., utility bills or lease agreements) used to verify your residence and rent amount.
• Address and Property Data: information submitted during rent entry verification, such as property address and rent value.
• Phone Number (for SMS verification): used temporarily to send one-time verification codes through our SMS partner ClickSend. Phone numbers are not stored in plain text and are securely hashed before being stored in our systems.
• Usage Data: anonymised analytics to help us understand how the app is used and improve its performance.

2. How We Use the Information

We collect and process your data for the following purposes:

• To verify rent entries and authenticate property-related information.
• To ensure the accuracy and reliability of rent data displayed to other users.
• To maintain records of verifications, including approval or rejection logs.
• To enhance the app experience and provide analytics on rental trends.

3. Data Storage and Security

Data is securely stored using Google Firebase services, including Cloud Firestore and Firebase Storage. Uploaded verification documents (such as utility bills) are encrypted and access-restricted to authorised administrators for review and verification only.

We employ security best practices including encrypted communication (HTTPS), access control, and audit logging to prevent unauthorised access or misuse. All sensitive data — including phone numbers, addresses, and uploaded documents — are handled in a way that prevents linking them to an identifiable individual. Identifiable details are either encrypted, hashed, or separated from verification data to protect user privacy.

4. Third-Party Services

We use trusted third-party providers to facilitate certain app features and verifications:

• PostGrid – for postal address verification letters.
• ClickSend – for sending SMS verification codes. Phone numbers are never stored in plain text and are only used for verification purposes.
• Firebase Authentication – for secure sign-in and identity management.
• Google Cloud Firestore & Storage – for encrypted data storage and file management.

These services comply with global data protection standards and operate under their own privacy policies.

5. Data Retention

Verification data (such as uploaded documents, address records, and verification results) is retained only as long as necessary for verification and audit purposes. Once verification is complete, documents may be securely deleted or anonymised after a defined retention period.

6. Anonymity and Non-Linkage

RealRents is designed to maintain user privacy. Individual verification data — such as addresses, phone numbers, and uploaded documents — is not linked to any personally identifiable information within the system. Verification records are stored separately from account identities to ensure that no single data set can be used to personally identify a user.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated data.

To exercise these rights, contact us at support@novatecceylon.info.

8. Data Deletion Requests

If you wish to permanently delete your account and associated data, including any uploaded verification documents, please email your request to support@novatecceylon.info. Once verified, your data will be deleted from our systems within 30 days, unless we are legally required to retain it.

9. Updates to This Policy

We may occasionally update this Privacy Policy to reflect new features, verification methods, or legal requirements. You should review this page periodically to stay informed of any changes. Continued use of the Application after such updates constitutes acceptance of the revised policy.