Welcome to iRentfy (located at https://irentfy.com), a service operated by Soliroush LLC ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your data when you use our services.
1. Information We Collect
We collect information you voluntarily provide and information automatically generated through your use of our services.
Personal Data (provided by you):
- Full name and email address
- Account credentials and authentication data
- Contact preferences and communication settings
- Billing and payment information (processed via approved third-party payment gateways — we do not store raw card data)
Usage Data (collected automatically):
- IP addresses, browser type, and operating system
- Pages visited, features used, and time spent on the platform
- Device identifiers and session tokens
- Error logs and performance diagnostics
2. How We Use Your Information
We use your data strictly for legitimate business and operational purposes:
- To create and manage your account and authentication
- To deliver, maintain, and improve our services
- To send transactional communications (e.g., account confirmations, billing receipts)
- To respond to support inquiries and resolve disputes
- To detect, prevent, and investigate fraud or security incidents
- To comply with our legal obligations
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
- Contract performance — processing necessary to provide you the services you have subscribed to
- Legitimate interests — fraud prevention, security monitoring, and product improvement, where these interests are not overridden by your rights
- Legal obligation — compliance with applicable laws and regulations
- Consent — for marketing communications, which you may withdraw at any time
4. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law:
| Data Type | Retention Period |
|---|---|
| Account & profile data | Duration of account + 30 days after deletion |
| Financial & billing records | 7 years (tax and accounting obligations) |
| Usage and activity logs | 12 months rolling |
| Support communications | 3 years |
| Security and access logs | 90 days |
Upon expiry of the applicable retention period, data is securely deleted or anonymized.
5. Sharing Your Information
We do not sell your personal data to third parties. We may share data only in the following limited circumstances:
- Service providers: Trusted sub-processors (e.g., cloud infrastructure, payment processors) who are contractually bound to process data only on our instructions and under equivalent data protection standards
- Legal requirements: Where required by law, court order, or government authority
- Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred; we will provide notice before this occurs
- Protection of rights: Where necessary to enforce our Terms of Service, prevent fraud, or protect the safety of our users
A list of our current sub-processors is available upon request.
6. International Data Transfers
Soliroush LLC operates infrastructure across multiple regions (including cloud servers in the EU). If you access our services from outside our primary operational region, your data may be transferred to and processed in other countries. All such transfers are conducted under legally recognized mechanisms, including:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your data ("right to be forgotten"), subject to legal retention obligations |
| Restriction | Request that we restrict processing of your data in certain circumstances |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests or for direct marketing |
| Withdraw Consent | Withdraw consent for processing at any time, without affecting prior lawful processing |
To exercise any of these rights, please contact us via the form at: Contact Form
We will respond within 30 days. Identity verification may be required before we fulfill your request.
8. Security of Your Information
We implement administrative, technical, and physical safeguards to protect your data, including:
- Encryption of data in transit (TLS 1.2+) and at rest
- Role-based access controls and least-privilege principles
- Regular security audits and vulnerability assessments
- Firebase App Check and server-side authentication validation
While we take every reasonable precaution, no system is completely impenetrable. We encourage you to use strong, unique passwords and to notify us immediately of any suspected unauthorized access.
9. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Privacy Policy
We may update this policy periodically. When we do, we will, where changes are material, notify you via email or an in-app notice at least 14 days before the changes take effect.
11. Contact Us
For privacy-related questions or to exercise your data rights:
Get in touch using our Contact Form