Privacy Policy

This Privacy Policy explains how CLIQ.RENT collects, uses, shares, and protects personal information when you use the Platform. Privacy is a design principle here: the entire product is built on the idea that your information is visible only to the people you choose.

1. Information we collect

Account information: name, email, phone, password (stored only as a cryptographic hash by our authentication provider), and role (owner or renter).

Profile information you choose to provide: photo, city, rental preferences, household details, and optional qualification details such as employment, income range, and credit range.

Listing information (Owners): property details, photos, pricing, availability, and CLIQ settings.

Activity: CLIQ memberships, saved homes, requests to rent, tours, applications, and messages sent through the Platform.

Payment information: processed by Stripe. We receive transaction metadata (amounts, dates, status) but never your full card number or bank credentials.

Technical data: device type, browser, IP address, and usage events used for security and to improve the product.

2. How we use information

To operate the Platform: showing the right homes to the right people at the right CLIQ price, processing requests and payments, sending notifications you've enabled, and providing support.

To keep the Platform safe: verifying accounts, preventing fraud and abuse, enforcing our Terms, and maintaining audit logs of consent events.

To improve the product: aggregate, de-identified analytics. We do not sell personal information, and we do not use your data for third-party advertising.

3. Who can see your information (the important part)

Renters: your profile is visible to the Owners who have added you to one of their CLIQs once you join, and to Owners you send a request to. It is never public. Owners see summaries (for example, "income meets 3x rent"), never your raw income or documents, unless you explicitly include them in an application. Every profile share is time-stamped and revocable from your Visibility Center. Your browsing activity is never shared.

Owners: your listings are visible only to people in your active CLIQs. They are never public and never indexed by search engines.

These rules are enforced at the database level (row-level security), not just in the app.

4. When we share information

Service providers who process data on our behalf under contract: Supabase (database and authentication hosting), Stripe (payments), Netlify (web hosting), and email delivery providers. Each receives only what it needs to provide its service.

Legal reasons: we may disclose information if required by law, subpoena, or to protect the rights, safety, or property of users or the public.

Business transfers: if CLIQ.RENT is involved in a merger or acquisition, information may transfer with the business, subject to this Policy.

We never sell personal information and never share it with data brokers or advertisers.

5. Data retention

We keep personal information while your account is active and as needed for the purposes above. When you delete your account, we delete your profile, saved homes, requests, and messages, except records we must keep for legal, tax, or dispute purposes (such as payment records and consent logs), which are retained only as long as required.

6. Your rights

Access and portability: request a copy of your data in a machine-readable format.

Correction: edit your profile at any time in the app.

Deletion: delete your account from Profile → Your data, or by emailing hello@cliq.rent.

Consent control: review and revoke every profile share from your Visibility Center.

California residents have rights under the CCPA/CPRA (access, deletion, correction, and no discrimination for exercising rights; we do not sell or "share" data as defined there). Residents of the EEA/UK have GDPR rights (access, rectification, erasure, restriction, portability, objection) with legal bases of contract performance, legitimate interests, and consent. To exercise any right, email hello@cliq.rent; we respond within the time required by applicable law.

7. Security

Data is encrypted in transit (TLS) and at rest. Access is controlled by row-level security policies so that even application bugs cannot expose a private listing or profile. Passwords are handled by our authentication provider and never stored in plaintext. No system is perfectly secure; we will notify affected users of any breach as required by law.

8. Cookies

We use only strictly necessary storage: authentication session tokens and your in-app preferences. No advertising trackers and no third-party marketing cookies. If we later add optional analytics cookies, we will ask for consent first.

9. Children

The Platform is not directed to children under 18, and we do not knowingly collect their information. If you believe a minor has provided us personal information, contact hello@cliq.rent and we will delete it.

10. Changes and contact

We will notify you of material changes to this Policy at least 14 days before they take effect. Questions or requests: hello@cliq.rent.