Privacy Policy

Last updated: 4 April 2026

1. Who we are

ZentedOut (“we”, “us”, “our”) is a rental portfolio manager that helps landlords and tenants in India handle agreements, rent tracking, receipts, and TDS compliance. This policy explains how we collect, use, and protect your personal information.

2. Information we collect

  • Account information: Name, email address, and password (hashed with bcrypt, never stored in plain text).
  • Property and tenancy details: Property address, rent amount, lease dates, tenant information, and payment records you enter.
  • Aadhaar numbers: When you upload a rent agreement, any Aadhaar numbers found are immediately hashed with bcrypt. Only the last 4 digits are stored in plain text for display purposes. We never store full Aadhaar numbers.
  • Uploaded documents: Rent agreement PDFs you upload for extraction are stored in cloud storage with server-side encryption.
  • PAN: Landlord and tenant PAN, used solely for TDS compliance features (Form 141, Form 144).

3. How we use your information

  • To provide the service: generating agreements, tracking payments, issuing receipts, and computing TDS.
  • To send transactional emails: rent reminders, payment notifications, collection reminders, and tenant invitations.
  • To extract agreement fields from uploaded PDFs using an AI inference service. The provider may temporarily log API requests for abuse monitoring but does not use your data to train AI models.

4. Information we do not collect

  • We do not process payments directly. UPI payment links redirect to your bank’s UPI handler. We never see or store bank account numbers, UPI PINs, or card details.
  • We do not use tracking pixels or third-party analytics.
  • We do not sell or share your data with advertisers.

5. Data storage and security

Your data is stored in a managed cloud database. Uploaded files are stored in cloud storage with server-side encryption. All connections use TLS. Passwords are hashed with bcrypt. Sessions use HTTP-only cookies.

6. Third-party services

  • AI inference provider: Used for agreement field extraction from uploaded PDFs. Document text is sent via API. The provider may temporarily log requests for abuse monitoring but does not use this data to train AI models.
  • Email delivery provider: Used for transactional emails (reminders, notifications, invitations).
  • Cloud storage provider: Used for encrypted file storage.

7. Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing us. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., tax records under the Income-tax Act, 2025).

8. Data retention

We retain your data for as long as your account is active. Payment records and receipts are retained for 8 financial years after the relevant assessment year, to align with income tax reassessment limitation periods under the Income-tax Act, 2025.

9. Applicable law

This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, as applicable. We will update this policy as DPDPA rules are notified and obligations become effective.

10. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of ZentedOut after changes constitutes acceptance.

11. Contact

For privacy-related questions, email us at (click to reveal).