Privacy Policy

GoRent Technologies Pvt. Ltd. (“GoRent,” “we”) runs a peer-to-peer marketplace for books and clothes. This policy explains how we collect, use, share, and keep personal data when you use the GoRent app or website. It is meant to comply with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023.

What we are improving — the privacy version, in full

This block is longer on purpose. Trust on GoRent depends on identity checks and listing photos, so we hold more sensitive data than a simple catalogue. You should be able to see that without hunting.

KYC documents are opened by people. Aadhaar or PAN images are not “just stored in a vault.” A named admin in the KYC Review queue looks at the front (and back, if you sent it), compares it with your profile name, and then approves or rejects. Every decision is written to an activity log. We do not use those images for advertising, lookalike audiences, or public listing pages. We do not print your Aadhaar number on a book or clothing listing.

Listing photos are reviewed before they are public, then they are public. A staff member in Listing Review sees your photos of the textbook or the outfit. After approval, other users see those same photos. Do not upload pictures you would not want a reviewer — and later a neighbour — to see. Rejected listings stay off the public site; we still keep the photos and the rejection reason so you (and we) can see why.

We collect less because we rent less. Launch categories are books and clothes only. We are not collecting vehicle RC, tool serial numbers, camping gear inventories, or medical notes for baby equipment. If we open a new category later, this policy will name the new data before we ask for it — not in a buried changelog. That is an improvement we are committing to in writing.

Rejection reasons are records, not vibes. If KYC or a listing is rejected, we keep the written reason so you can fix it and so we can explain the decision if you ask. That is part of trust: a no without a sentence is not good enough.

What we are still tightening. Faster queue times, clearer in-app copy when a document is cropped, and staff access limited to people who actually review KYC or listings. If we add an identity-assist vendor, we will name them in this policy before that switch is turned on.

1. Information we collect

You give us

Name, email, mobile number, city, profile photo. For KYC: Aadhaar or PAN images, document number if you type it, and any resubmission after a rejection. Hosts also give bank details for payouts. Listing data includes titles, descriptions, prices, deposits, and photos of books or clothes. Support messages, career forms, and newsletter emails are stored if you send them.

The app and site collect

Device type, OS, IP address, approximate location if you allow it (to show nearby books and clothes), search terms, and booking history. Cookies on the website help the pages work and help us see which pages are useful.

Others send us

Payment status from Razorpay. We do not store your full card number. If we use an identity-assist vendor in future, we will name them here before we turn that on.

2. How we use it

We use this data to: run your account; complete KYC review; approve or reject listings; run bookings and escrow; pay hosts; handle disputes; send booking messages; improve the two categories we support; prevent fraud; meet legal duties; and, only with consent, send product updates. We do not use KYC images for advertising.

3. Who sees what

• Other users: After a listing is approved, other people see your public name, city, ratings, verification badge, and the listing photos. When a booking is confirmed, we share what is needed for handover (typically name, photo, and in-app chat). We do not publish your Aadhaar number on the listing page.
• GoRent staff: Admins in the KYC Review and Listing Review queues see documents, listing photos, and rejection notes. Those actions are written to an activity log.
• Processors: Razorpay (payments), hosting providers, email/SMS vendors — under contracts that limit how they use the data.
• Law: We may disclose data if Indian law, a court, or a lawful government request requires it, or to protect users when we reasonably believe there is fraud or harm.

We do not sell personal data for other companies’ marketing.

4. Security

Transport uses TLS. Documents sit behind admin login. Staff accounts can be deactivated. No system is perfect; if we learn of a breach that affects you, we will follow applicable notice rules. Payment credentials stay with PCI-compliant partners.

5. How long we keep it

Account data lasts while the account is open. KYC images last for the life of the account plus up to 3 years, unless a longer legal hold applies. Booking and payment records are typically kept 7 years for tax and dispute history. You can ask us to delete an account; we will keep what the law still requires (for example, a closed dispute file).

6. Your rights

You may ask to access, correct, or delete personal data, withdraw marketing consent, and request a portable copy where the DPDP Act gives you that right. Write to privacy@gorent.in. You may also complain to the Data Protection Board of India when that channel applies.

7. Children

The Platform is for people 18 and older. Kids’ books and kids’ clothes may be listed by an adult parent or guardian — the account holder is still the adult. We delete accounts we learn were opened by a minor.

8. Location

Location helps show nearby books and clothes and to log handover roughly. You can switch it off in device settings. Some search features will then be less useful; the account still works.

9. Where data lives

We aim to keep primary storage in India. If a processor uses infrastructure outside India, we will use the safeguards Indian law expects at that time.

10. Changes

If we start a new category and need new data (for example, a different ID), we will update this policy and notify you at least 15 days ahead for material changes. The date at the top is the latest version.

11. Contact

Data Protection contact: privacy@gorent.in. GoRent Technologies Pvt. Ltd., 42 1st Floor, 100 Feet Road, Indiranagar, Bengaluru 560038, Karnataka, India.