Privacy Policy

Right now the RemRent site is a waitlist and nothing else. There are no accounts, there is no property search, and nothing is for sale. This policy describes exactly what happens to your data in that situation — and, at the end, what will change once the service opens.

Who is responsible

REMRENT TECNOLOGIA LTDA, registered in Brazil under CNPJ 68.547.430/0001-61, at Av. Visconde de Guarapuava, 3000, Centro, Curitiba – PR, CEP 80.010-100, Brazil.

For anything about privacy, including reaching the person responsible for data protection, write to contact@remrent.com with Privacidade in the subject line.

What we collect

• Your e-mail address, as you typed it into the form.
• The language of the page you signed up on, so we can write to you in it.
• A code derived from your IP address and your browser. What we keep is the output of a one-way calculation salted with a secret key; the IP address itself and the browser string are never written down.
• Where the visit came from, when there is anything to record: the campaign tag carried in the page address, and the bare domain of the site that linked to us. The domain, never the full address of the page you came from.
• The date and time you signed up.

We do not ask for and do not hold a name, a phone number, a postal address, an identity document or payment details.

There are no analytics cookies, no advertising cookies and no third-party trackers on these pages. Your own browser storage holds two things and no more: the language you picked, and — if you arrived through a campaign link — that link's tag, which lasts only as long as the tab stays open. The anti-bot check described below belongs to Cloudflare and may leave a technical marker of its own in your browser so it does not challenge you again on every page.

Server logs

Like any web server, ours notes each page requested: the date and time, the address asked for, the response code and the browser the request announced. The IP address in those logs is truncated before it is written — we keep only the leading part, which identifies a network range rather than a subscriber. The logs exist to diagnose faults and contain abuse, and they are not kept for longer than 90 days.

What we use it for

• Sending you the invitation when the service launches.
• Keeping duplicate sign-ups and abuse of the form under control.

We do not run a newsletter and we do not hand your address to anyone else's advertising.

The legal basis

Sending the invitation rests on your consent (LGPD, art. 7, I), given when you submit the form. The measures against abuse of the form rest on legitimate interest (art. 7, IX), minimised as described above: what is stored is a code, not your IP address.

The anti-bot check (Cloudflare Turnstile)

To tell people from bots, the form uses Cloudflare's Turnstile. Opening the page makes your browser load a script directly from Cloudflare; submitting the form makes our server send Cloudflare the challenge token together with your IP address, so that Cloudflare can confirm the challenge was passed. That is the single moment your IP address leaves our infrastructure, and we do not record it. What Cloudflare does with it is governed by Cloudflare's own privacy policy.

Where the data sits, and who else sees it

Sign-ups live in a database file on the server that hosts the site — a machine rented from Hetzner Online GmbH (Germany) and located outside Brazil. Delivery of the site and its protection against abuse run through Cloudflare, Inc. Those two suppliers are the processors, and there are no others.

We do not sell your data, we do not publish it, and we do not pass it to anyone else. Because part of the processing happens outside Brazil, an international transfer takes place; it is made on the basis of your consent and of the contracts signed with those suppliers (LGPD, arts. 33 and 35).

How long we keep it

Your sign-up stays with us until the launch invitation has gone out, and after that for as long as you want to remain on the list — at most 24 months from the day you signed up, or until you ask us to delete it, whichever comes first. Ask us to delete it and we delete the record — and, if it has been shared with anyone, we pass your request on to them so they delete it too.

The counters that hold form abuse in check stop counting one hour after each submission and are cleared on the next request; they carry only the code described above and a timestamp, with no e-mail address in them at all. Server logs are not kept beyond 90 days.

Your rights

Brazil's data protection law (LGPD, art. 18) gives you, among others, the right to confirm that processing exists, to see your data, to correct it, to ask for it to be anonymised or erased, to ask for it in portable form, to learn who it has been shared with, and to withdraw your consent whenever you like.

To exercise any of these, write to contact@remrent.com with Privacidade in the subject line. It costs nothing, and we answer within 15 days.

What changes at launch

When the service opens there will be user accounts, saved searches and purchases of the paid features. Payments will be handled by Stripe: card details are processed by the payment provider directly and are never stored by RemRent. This policy will also grow a section on the data that appears inside the public listings we gather from the source portals. None of that goes live before this page has been updated to describe it.

Changes to this policy

The date of the last revision is at the top of this page. We keep the earlier versions; if you need a copy, ask at the address above.