Privacy Policy

The data controller responsible for your personal data on the RentBase platform is:

RHOUMA MOHAMED YASSINE ev.
Kunigunda útja, 1037 Budapest, Hungary
TVA: 90813519-1-41

We collect the following categories of personal data:

• Account data: name, email address, username, and password.
• Profile data: city, bio, and profile photo (optional).
• Listing data: item descriptions, photos, pricing, and pickup locations.
• Booking data: rental dates, transaction history, and messages between users.
• Payment data: payment method details are processed by Stripe. We do not store your full card numbers.
• Verification data: identity verification status provided by Stripe Identity. We do not store your ID documents or selfies.
• Technical data: IP address, browser type, and cookies (see Section 4).

We process your personal data for the following purposes:

• To provide and operate the rental marketplace
• To process payments, payouts, and security deposits
• To verify user identity and prevent fraud
• To communicate with you about bookings, account activity, and support requests
• To comply with legal obligations, including tax and accounting requirements
• To improve the Platform and ensure its security

The legal basis for processing is typically the performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in operating a safe marketplace (Art. 6(1)(f) GDPR). Where required by law, we rely on your consent (Art. 6(1)(a) GDPR).

We use essential cookies to enable core functionality of the Platform. These include:

• Authentication token: maintains your login session.
• Locale preference: remembers your selected language.
• Sidebar state: remembers your dashboard layout preference.

We do not use tracking or marketing cookies at launch. For more details, please see our Cookie Policy.

We share data with trusted third-party service providers only to the extent necessary to operate the Platform:

• Stripe, Inc. — for payment processing, payouts, identity verification (KYC), and deposit holds.
• Hosting providers — for cloud infrastructure and data storage.

All third parties are bound by data processing agreements that comply with GDPR requirements. We do not sell your personal data to advertisers or other unrelated third parties.

Our identity verification is powered by Stripe Identity. When you submit your ID and selfie, those documents are sent directly to Stripe's secure servers.

RentBase does not store copies of your government-issued ID or selfie images. We only receive a verification result (verified, pending, or rejected) and related metadata. Stripe retains the documents in accordance with its own privacy and retention policies.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate data.
• Right to erasure ("right to be forgotten") — request deletion of your data, subject to legal retention obligations.
• Right to restriction of processing — request limited processing under certain conditions.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.

To exercise any of these rights, please contact us using the details in Section 9. We will respond within 30 days.

We retain your personal data for as long as your account is active or as needed to provide you with our services. Account and transaction data are retained for at least 8 years to comply with Hungarian accounting and tax laws.

Verification status data is retained for the lifetime of your account. If you request account deletion, we will delete or anonymise your personal data unless we are legally required to retain it.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

RHOUMA MOHAMED YASSINE ev.
Kunigunda útja, 1037 Budapest, Hungary
TVA: 90813519-1-41