Privacy Policy

1. Who We Are

Trust Rent ("we", "us", "our") is a property rental platform connecting landlords and tenants through verified identity and honest reviews. Our platform is accessible at trustrent.com.

For any privacy-related questions, contact us at: privacy@trustrent.com

2. Data We Collect

We collect the following categories of personal data:

• Identity data: full name, email address, national fiscal identification number (e.g. Codice Fiscale, NI number), country of residence.
• Account data: role (owner or guest), profile information, bio, avatar.
• Property data: property listings, images, location, pricing submitted by owners.
• Rental data: booking requests, contract dates, payment records.
• Feedback data: reviews, ratings, guest feedback, owner responses.
• Payment data: subscription billing via Stripe (we do not store card details directly).
• Usage data: cookies, analytics, device and browser information.

3. Why We Collect Your Data (Legal Basis)

4. Fiscal ID & Identity Verification

We collect your national fiscal identification number to uniquely verify your identity and prevent duplicate or fraudulent accounts. This data is:

• Collected once at registration and cannot be changed.
• Used solely for identity verification purposes.
• Never shared with third parties for marketing.
• Retained for the duration of your account and as required by applicable law.

5. Feedback & Reputation Data

Reviews, ratings, and guest/host feedback are a core part of our platform. This data is permanently linked to your identity to ensure accountability and prevent abuse through account deletion and re-registration. Deleting your account does not erase submitted feedback, which may remain visible as part of the platform's trust system.

6. Data Sharing & Third Parties

We share your data only with:

• Stripe — for payment processing and subscription management. Stripe is GDPR-compliant and acts as a data processor under a Data Processing Agreement.
• Base44 — our hosting and backend infrastructure provider.
• Email providers — for transactional and notification emails.

We do not sell your personal data to any third party.

7. Cookies

We use cookies for:

• Essential cookies: required for authentication and core functionality (no consent needed).
• Analytics cookies: to understand usage patterns (only with your consent).
• Marketing cookies: only activated with your explicit consent.

You can manage your cookie preferences at any time via the "Cookie Settings" link in the page footer.

8. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the right to:

• Access — request a copy of your personal data (Art. 15).
• Rectification — correct inaccurate data (Art. 16).
• Erasure — request deletion of your account and personal data (Art. 17), subject to legal retention requirements and the feedback permanence policy above.
• Restriction — request we limit processing of your data (Art. 18).
• Portability — receive your data in a structured, machine-readable format (Art. 20).
• Objection — object to processing based on legitimate interest (Art. 21).
• Withdraw consent — at any time, for consent-based processing (Art. 7.3).

You can exercise the right to erasure directly from your profile ("Delete My Account"), or the right to portability via "Download My Data". For all other requests, email us at privacy@trustrent.com. We will respond within 30 days.

9. Data Retention

• Account data is retained for the duration of your account plus 2 years after deletion.
• Payment records are retained for 10 years as required by tax law.
• Feedback and reputation data is retained indefinitely as part of the platform's trust system.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS), access controls, and secure hosting infrastructure. However, no system is 100% secure and we cannot guarantee absolute security.

11. International Transfers

Your data may be processed outside the EU/EEA by our service providers (e.g. Stripe, Base44). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

12. Data Processing Agreements (DPAs)

Where we engage third-party service providers that process personal data on our behalf, we ensure that Data Processing Agreements (DPAs) are in place in accordance with GDPR Article 28. These agreements require processors to implement appropriate technical and organisational measures to protect your data and to process it only on our documented instructions.

Our key sub-processors and their DPAs include:

• Stripe, Inc. — payment processing and subscription management. Stripe's DPA is incorporated into their Data Processing Agreement, available at stripe.com/legal/dpa.
• Base44 — cloud hosting and backend infrastructure. Data is processed under Base44's terms of service and associated data processing obligations.
• Email service providers — transactional and notification emails sent on behalf of the platform. Providers are contractually bound to process data solely for the purposes we specify.

We review our sub-processor list regularly. You may request an up-to-date list of sub-processors by contacting privacy@trustrent.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

14. Contact & Complaints

For any privacy concerns, contact us at privacy@trustrent.com.

You also have the right to lodge a complaint with your national data protection authority (e.g. Garante in Italy, ICO in the UK, CNIL in France).