Privacy Policy
Last updated: 10 July 2026
This policy explains what personal data RentSorter (“we”, “us”), a business based in the United Kingdom, collects and how we use it. RentSorter is the data controller for the purposes of UK GDPR. If you have any questions, email hello@rentsorter.com.
Our approach in one line
RentSorter is “process-and-forget”: the statements you upload are read in memory to produce your results and are not stored on our servers. We keep as little about you as we can — essentially your email and a count of how much you’ve used the Service.
What we collect
- Your email address — to create your account and send you one-time sign-in links.
- Usage information — a count of how many statements you process and on which dates, so we can apply plan limits.
- The statements you upload — processed in memory to extract the data, then discarded. We do not save your files.
- Your results — the extracted data is returned to your browser and to the spreadsheet you download. It lives with you, not on our servers.
- Basic technical data — limited server logs needed to run the Service securely and diagnose problems.
- Payment information (paid plans) — handled by our payment provider; we don’t see or store your card details.
How we use it, and our legal bases
- To provide the Service and your account — performance of our contract with you.
- To keep the Service secure, prevent abuse, and fix problems — our legitimate interests.
- To take payment for paid plans — performance of our contract with you.
- To send service messages (e.g. sign-in links) — contract / legitimate interests.
Who processes data on our behalf
To run RentSorter we use a small number of trusted providers, who act as our processors:
- Anthropic — provides the AI that reads your statements. The content of a statement is sent to Anthropic solely to extract its data; under its API terms it is not used to train its models.
- Supabase — stores your account email and usage counts, and handles sign-in.
- Vercel — hosts and serves the application.
- Brevo — sends your one-time sign-in emails.
- Google (Workspace) — our email, if you contact us.
- Stripe — processes payments for paid plans.
We don’t sell your personal data, and we don’t use it for advertising.
International transfers
Some of our providers are based outside the UK (for example in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
Your uploaded statements are not retained — they’re discarded after processing. Your account email and usage records are kept while your account is active and for a reasonable period afterwards, then deleted. You can ask us to delete your account and data at any time.
Cookies
We use only the essential cookies needed to keep you signed in. We do not use advertising or third-party tracking cookies, so there’s no cookie banner to click through.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, or object to our use of your personal data, and to data portability. To exercise any of these, email hello@rentsorter.com. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk.
Security
We take reasonable technical and organisational measures to protect your data — including processing statements in memory rather than storing them, encrypted connections, and access controls. No system is perfectly secure, but keeping little data is our first line of defence.
Children
RentSorter is not intended for anyone under 18.
Changes
We may update this policy from time to time; we’ll change the date above when we do.
Contact
For any privacy question or request, email hello@rentsorter.com.