In force from 19 September 2026.
Privacy policy
This describes what TinkiRent stores, why, and what you and your tenants can ask us to do about it.
What we store about you
- Your name, email address and — if you give it — your mobile number.
- The receipt and payment details you configure, including any UPI ID or bank instructions, because those appear on what your tenants are shown.
- Your currency and timezone, which every amount and due date is calculated against.
- A record of which version of these policies you accepted, and when.
- If you subscribe: the state your invoices are addressed to, your GSTIN if you give it, the state of your autopay, and the tax invoices we issue you.
Your card, bank account or UPI details are given to our payment provider, Razorpay, when you set up autopay. We do not receive or store them.
What we store about your tenants
Only what rent administration needs: a name, a contact number or email address for sending statements, and the tenancy and payment history attached to them. TinkiRent does not collect identity documents from tenants and has no place to put them.
A tenant may opt out of messages from us. That choice is keyed to their phone number, it survives a change of tenancy, and neither you nor we can override it.
When a tenant opens the statement link you shared with them, we record the time it was opened and which link was opened, so you can see whether a statement reached them. We do not record their IP address, their device, or anything else that would identify the person holding the phone.
A tenant telling you they have paid may attach a screenshot. It is stored privately, encrypted at rest, and readable only through a short-lived link the product issues to you — never by anyone else, and never through a public address. A screenshot is never treated as proof that money arrived; only your own confirmation does that. We delete it automatically once your retention period has passed — five years unless you shorten it — and what the tenant told you stays on their entry after the image has gone.
Where it is stored
In managed Postgres hosted in India (Mumbai region), with access limited to the systems that need it. Records are separated by account: the product is built so that one account cannot read another’s data, and that separation is enforced by the database itself as well as by the application.
Who else sees it
Our hosting and messaging providers process data on our instructions in order to run the service, and Razorpay processes your subscription payments and autopay. We do not sell data, and we do not use your tenants’ contact details for anything except the messages you send them through TinkiRent.
Your rights
You can export your data in a machine-readable form and ask for your account to be deleted. Where the law requires us to keep certain records after an account closes — proof of consent and tax invoices being the usual examples — we will keep only those, and tell you what they are.
Changes
When this policy changes in substance, it is published as a new version. Every earlier version stays published, and what you accepted stays on record as what you accepted.