Rentr (the platform operating rentr.ae) shares your personal data only with the sub-processors below, and only for the purposes shown. We do not sell your personal data. We do not share it with advertising networks or data brokers.
We give at least 30 days’ notice before adding a new sub-processor or materially changing the role of an existing one. Subscribe to changes by emailing info@rentr.ae with subject “Sub-processor updates”.
Current sub-processors
| Name | Role | Data category | Region | Privacy policy |
|---|---|---|---|---|
| Neon | Primary database (Postgres) | All structured account, request, booking, and payment-metadata records | EU / Frankfurt (eu-central-1) | Privacy policy ↗ |
| Resend | Transactional email delivery | Recipient address + email body | EU | Privacy policy ↗ |
| Cloudflare R2 | Object storage for uploads | Uploaded photos, Ejari documents, title deeds, contractor certifications | EU / Frankfurt primary, UAE point-of-presence for edge cache | Privacy policy ↗ |
| Stripe | Payments and payouts | Payment metadata; for contractor payouts, identity and bank-account data | EU + global (Ireland + US) | Privacy policy ↗ |
| Vercel | Application hosting and edge runtime | Application requests and runtime logs | Global edge with Frankfurt primary | Privacy policy ↗ |
| HubSpot | Customer relationship management (CRM) | Lead, signup, and lifecycle event data | EU | Privacy policy ↗ |
| Zoho Books | Accounting and invoicing | Line-item invoice data for VAT-compliant tax invoices | UAE | Privacy policy ↗ |
| Zapier | Integration router | Event payloads when used as integration glue | US | Privacy policy ↗ |
| Google (OAuth + Places API) | Federated sign-in plus contractor review enrichment | OAuth: email + profile name (scope profile + email). Places API: contractor business identifiers to fetch public Google reviews. | Global | Privacy policy ↗ |
Cross-border transfers
Several sub-processors above are located outside the UAE. Under PDPL Articles 22–23, transfers outside the UAE require an appropriate legal basis. Rentr relies on a combination of:
- Contract performance, many transfers are necessary to deliver the Service you signed up for.
- Contractual safeguards, our DPAs contain protections substantially equivalent to EU Standard Contractual Clauses.
- Adequacy, for countries the UAE Data Office has determined provide an adequate level of protection.
You can ask the DPO for a copy of the contractual safeguards we have in place with any specific sub-processor by emailing info@rentr.ae with subject “DPO request”.
Changes to this list
This list is updated as new sub-processors are added. The version and content hash in the page header and footer change every time the list changes. The most reliable way to be notified is to email info@rentr.ae with subject “Sub-processor updates”, we will add you to the change-notice list.