RentFort Africa serves landlords across Africa. We are committed to protecting your personal data in accordance with applicable data protection laws in your country, including but not limited to the Uganda Data Protection and Privacy Act 2019, the Kenya Data Protection Act 2019, the Tanzania Personal Data Protection Act 2022, and the African Union Data Policy Framework. This Privacy Policy explains what information we collect, how we use it, and your rights as a data subject wherever you are located.

1. Who We Are

RentFort Africa is a pan-African property management software platform headquartered in Kampala, Uganda and serving landlords across East Africa, West Africa, and beyond. We operate in multiple countries and currencies including UGX (Uganda), KES (Kenya), TZS (Tanzania), RWF (Rwanda), GHS (Ghana), NGN (Nigeria), and USD.

We act as a data controller in respect of landlord account data, and as a data processor in respect of tenant data entered by landlords using our platform.

Contact: hello@rentfort.africa

2. What Personal Data We Collect

2.1 Landlord Account Data

• Full name or company name
• National ID, passport number, or company registration number
• Email address and phone number
• Physical address and city
• Profile photo or company logo
• Official stamp or seal image (optional)
• Default operating currency and country
• Financial transaction records on the platform

2.2 Tenant Data (entered by landlords)

• Full name and phone number
• National ID or identification document number
• Profile photo (optional)
• Lease documents uploaded by the landlord
• Payment history and outstanding balances
• Maintenance requests
• In-app messages with their landlord

2.3 Technical Data

• Login timestamps and session data
• Device and browser type
• IP address (collected by our hosting infrastructure)

3. Why We Collect This Data

We collect and process personal data only for the following specific, lawful purposes:

• Creating and managing your account on the RentFort Africa platform
• Enabling landlords to manage properties, units, and tenants
• Processing and recording rent and utility payments
• Generating payment receipts and tax estimate documents
• Facilitating communication between landlords and tenants
• Sending email notifications including receipts and subscription reminders
• Processing subscription payments via mobile money
• Verifying identity and preventing fraud
• Complying with applicable laws in the countries where we operate
• Improving the platform and user experience

We do not sell your personal data. We do not use your data for advertising or marketing to third parties.

4. Legal Basis for Processing

We process your data on the following legal bases, consistent with data protection laws across African jurisdictions:

• Contract performance — processing necessary to provide the RentFort Africa service you have subscribed to
• Consent — where you have freely given specific consent, such as uploading a profile photo
• Legitimate interests — for platform security, fraud prevention, and service improvement
• Legal obligation — where required by applicable law in your country

5. How We Store and Protect Your Data

Your data is stored on Supabase (PostgreSQL database on AWS infrastructure) with Row Level Security enforced — meaning each landlord can only ever access their own data. No cross-account data access is technically possible.

Sensitive files are stored in private, encrypted buckets and accessed only through time-limited signed URLs that expire after 1 hour. All connections use HTTPS/TLS encryption.

Security measures include:

• Database-level Row Level Security on all tables
• Authentication required for all data operations
• Tenant portal accounts fully isolated from landlord accounts
• Deactivated tenant accounts banned at authentication level
• Admin functions protected by secret keys
• No plaintext storage of passwords

6. International Data Transfers

As a pan-African platform serving landlords across multiple countries, your data may be processed in a country other than your own. Our infrastructure providers (Supabase, Vercel) are based in the United States and operate under international data protection standards.

Where your data is transferred across borders, we ensure appropriate safeguards are in place consistent with your local data protection law. Users from Kenya, Tanzania, Rwanda, Ghana, Nigeria, and other African countries are entitled to the same data protection standards regardless of where our servers are located.

We comply with the African Union Data Policy Framework and the principles of the EAC data governance standards where applicable.

7. Third-Party Service Providers

We share data only with trusted providers required to operate the platform:

• Supabase — database, authentication, file storage (United States)
• Vercel — web hosting and serverless functions (United States)
• PawaPay — mobile money payment processing (pan-African)
• Resend — transactional email delivery (United States)
• Anthropic — AI assistant functionality (United States)

All providers are contractually bound to process data only as instructed and to maintain appropriate security.

8. Your Rights as a Data Subject

Regardless of your country, you have the following rights:

• Right to access — request a copy of your personal data
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data subject to legal retention obligations
• Right to object — object to certain types of processing
• Right to data portability — receive your data in a portable format
• Right to withdraw consent — where processing is based on consent

To exercise any right, email us at hello@rentfort.africa. We respond within 21 days.

If you are unsatisfied with our response, you may contact your national data protection authority:

• Uganda — Personal Data Protection Office (PDPO), NITA-Uganda: nita.go.ug
• Kenya — Office of the Data Protection Commissioner: odpc.go.ke
• Tanzania — Personal Data Protection Commission: pdpc.go.tz
• Rwanda — Rwanda Information Society Authority (RISA): risa.rw
• Ghana — Data Protection Commission: dataprotection.org.gh
• Nigeria — Nigeria Data Protection Commission: ndpc.gov.ng

9. Data Retention

• Account data — retained while your account is active plus 5 years for financial record-keeping
• Payment records — retained for 7 years in accordance with applicable tax law
• Tenant data — retained while the landlord account is active
• AI chat history — deletable by the landlord at any time

10. Cookies

We use only essential cookies required to maintain your login session. We do not use advertising cookies, third-party tracking, or analytics that track you across other websites.

11. Children's Data

RentFort Africa is not directed at persons under 18. We do not knowingly collect data from minors. Contact us immediately if you believe a minor has registered.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email and by notice on the platform. Continued use after changes take effect constitutes acceptance.

RentFort Africa · Kampala, Uganda · hello@rentfort.africa