01What we collect
While you're on the waitlist, we collect the email address you give us and basic delivery metadata (whether the message was opened, bounced, or marked as spam). That's it.
Once Renzo launches and you sign in, we'll collect what's needed to run the product: your contact info, the rental properties you list, the leases you draft, the rent payments you collect through us, and your conversations with Renzo (the AI). Maintenance threads and lease terms are stored so we can come back to them.
02Tenant information
If you bring a tenant into Renzo, we will collect their contact info, payment information they enter, and any messages they exchange with you or with the AI co-pilot. We treat tenant data with the same care as your data — same retention, same security, same right to delete.
03What we don't do
- We don't sell your data, or your tenants' data, to anyone.
- We don't train external AI models on your messages or your tenants' messages.
- We don't run ad-tracking pixels on this site or in the app. We use first-party analytics (PostHog) and Vercel's anonymized page-view counts to understand how the product is used — both opt-in via the cookie banner.
04Who we share with
We share only with vendors we need to run the product, and only what they need to do their job. Today that means: Resend (email delivery), Supabase (database + auth, hosted on AWS US-East), Vercel (hosting + anonymized page-view analytics), PostHog (product analytics, opt-in), Google Cloud (Gemini AI — paid tier, no training on inputs), Stripe + Plaid (payments, from Slice B onward), and Documenso (e-signature). We pick US-based vendors where possible and review them annually.
05How long we keep it
Waitlist emails: until you ask us to delete them, or until we launch and you decide not to sign up — whichever comes first.
Account data: for as long as you have an account, plus 24 months after you close it (for tax and dispute records). Lease documents and rent ledgers are kept seven years, the standard retention for Michigan landlord records.
06Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email privacy@renzoreport.com from the address on the account and we'll get back to you within seven days. If you're a Michigan resident exercising rights under state law, we don't charge for the first request in a 12-month window.
07Security
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is limited to engineers on call. We run quarterly access reviews and yearly third-party penetration tests. If we ever have a breach that affects you, we'll notify you within 72 hours of confirming it.
08Cookies
This site uses first-party analytics cookies (PostHog) and Vercel's cookie-less page-view counts to understand how visitors use it. Analytics (PostHog) load only after you click Allow on the cookie banner — Vercel page-view counts are always active but do not set cookies or identify you. To opt out of PostHog: click Reject on the banner, or clear the renzo_cookie_choice key from your browser's localStorage and reload the page to see the banner again.
09Changes
If we change this policy in a way that matters, we'll email everyone on the waitlist or in the product at least 30 days before the change takes effect, and we'll keep the prior version archived at /privacy/v1.0.
10Contact
Renzo, Inc. — Detroit, Michigan. Reach the human in charge of this at privacy@renzoreport.com.