Privacy Policy

Last updated: May 1, 2026

What data we collect

Account data: email address, display name, password (hashed).
Property and tenant data: addresses, lease terms, rent amounts, tenant names and contact info that you enter.
Payment and expense data: rent received, expenses, FX rates, CRA remittance records.
Gmail payment data: only with your explicit OAuth consent. RentLedger reads only emails labeled with the RentLedger Gmail label (which we create on your behalf during setup) to detect rent payment confirmations. We never read your full inbox.

How we use it

We use your data exclusively to provide RentLedger's record-keeping and tax-reporting features. Specifically: tracking rent received, calculating CRA remittances and Schedule E figures, generating reports, and surfacing late-payment alerts. We do not use your data for advertising or analytics profiling. We do not use tracking cookies or third-party analytics.

Gmail data handling

Accessed only after you grant explicit OAuth consent.
Used solely to detect rent payment notifications (e-transfers, Interac auto-deposits).
Parsed payment data is stored in your account; the original email content is not retained beyond what is needed to deduplicate imports.
Never sold, rented, or shared with third parties.
You can revoke Gmail access at any time in your Google Account permissions. Revoking access does not delete data already imported.

Data storage and retention

All data is hosted in Canada on Supabase's ca-central-1 region (Montréal). Data in transit is encrypted with TLS; data at rest is encrypted with AES-256.
Account data is retained for as long as your account is active. Upon account closure, all personal data is permanently deleted within 30 days.

Third-party services

RentLedger uses the following third-party services that may process your data:

Supabase — database and authentication hosting (Canada, ca-central-1). See Supabase Privacy Policy.
Google OAuth — used to authenticate your Google account and, with your consent, read Gmail labels for rent payment detection.

No other third-party services have access to your personal or financial data.

Your rights

You have the right to:

Access all data we hold about you
Correct inaccurate data
Request deletion of your account and all associated data
Export your data in CSV format

To exercise these rights, email admin@rentledger.ca.

PIPEDA compliance

RentLedger complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect only the personal information needed to provide the service, obtain meaningful consent, and protect data with appropriate safeguards.

Contact

For privacy questions or to file a complaint, email admin@rentledger.ca.