Legal
Privacy Policy
Last updated: September 2026
Who we are
RentReaper is a rental monitoring service operating at rentreaper.uk. For data enquiries contact: [email protected]
What data we collect
- Your name, email address and phone number
- Your Gmail address and either an encrypted Gmail App Password or an encrypted Google permission token
- Your search preferences (budget, bedrooms, location)
- Your enquiry message template
- Payment information (processed by Stripe — we never see your card details)
- Logs of actions taken on your behalf (emails sent, listings matched)
- Match feedback you give (thumbs up or down on your dashboard, or a 1/2 reply to a WhatsApp receipt)
- Documents you upload (optional) — up to four files (photo ID, proof of student status, guarantor form, reference) if you choose to add them under Documents on your account page
- Housemate profile (optional) — a first name, a short blurb and your university, plus whatever optional extras you choose to add (course, year of study, budget range, preferred area, move-in timing, group size, hobbies, what you're looking for) and an optional profile photo, if you join the housemate list from your account page
- WhatsApp number (optional) — if you connect WhatsApp
Why we collect it
We collect this data solely to provide the RentReaper service — monitoring rental listings and sending alerts and enquiries on your behalf.
How we store it
Your data is stored on a secured server in the EU. Your Gmail App Password is encrypted at rest using industry-standard encryption and is never readable by us in plain text.
Who we share it with
- Stripe — for payment processing
- Letting agents — your name and contact details are included in enquiry emails sent on your behalf
- Lawson & Thompson — if you opt in to their release alerts and submit property choices, your application (your name, email address and phone number) goes to them, sent from your own email account
- Twilio — carries the WhatsApp messages, if you connect WhatsApp
- No other third parties
Google account connection
If you connect your Google account, RentReaper requests permission to
send email on your behalf (gmail.send) and to see your email
address. We use this only to send viewing enquiries you have asked us to send; we never
read, search or delete your mail. Your permission token is stored encrypted and is deleted
and revoked when you click Disconnect on your account page.
RentReaper's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Document pack
If you upload documents and switch on "Attach my documents to enquiries", we attach them to the viewing enquiries we send on your behalf — only to letting agents whose contact address we have verified ourselves, never to an address we found by scraping a listing. Your photo ID is only attached if you also switch on "Include my photo ID". The files are encrypted on our server and decrypted only at the moment an enquiry is sent. Nobody at RentReaper can view them through the admin tools. You can replace or delete each file at any time; we delete them automatically when your subscription ends or after 90 days without a match or an upload, and on request by email. They are not included in our backups.
If you connect WhatsApp we store your number and send one message per match via Twilio; reply STOP to stop. If you reply 1 or 2 to a match receipt we store that as feedback on the match.
Housemate list
If you join the housemate list, subscribers at the same university who have also joined can see your first name, your blurb, and the bedroom range and budget from your preferences. We remove email addresses, phone numbers and links from blurbs. Nobody outside the list sees it, and it is never public. When you and another person both mark "interested", we email each of you the other's account email address and a short extract from their blurb — that is the only time an address is shared, and it cannot be recalled once sent. You can pause or delete your profile at any time. Profiles reported by two people are hidden until we have looked. Profiles of lapsed subscriptions are hidden immediately and, with their interests and reports, deleted 12 months after the subscription ended.
Any optional extras you add to your profile (course, year of study, budget range, preferred area, move-in timing, group size, hobbies, what you're looking for) are shown on your card to the same list members, under the same rules. A profile photo is stored encrypted on our server and is never shown while you browse: other members see a monogram until you and another person mutually match, at which point your photo appears on your card for them and travels on the introduction email. We can remove a photo that breaks the rules. Your photo is deleted with your profile and is not included in our backups.
How long we keep it
We retain your data for as long as your subscription is active. Upon cancellation you may request deletion by emailing us. Uploaded documents are deleted sooner — see Document pack above. Housemate profiles are deleted sooner — see Housemate list above.
Your rights
Under UK GDPR you have the right to access, correct or delete your personal data. Email us at [email protected] to exercise these rights.
Cookies
We use one strictly necessary session cookie to keep you logged in; no tracking or advertising cookies.