Privacy Policy

This Privacy Policy explains what personal information Zenant ("we," "us") collects through the Zenant application at zenantapp.com (the "Service"), how we use, share, store, and protect it, and the choices you have. It applies to landlords and property managers and to applicants and tenants who apply, pay rent, sign leases, and communicate through the Service.

1. Information we collect

• Account & profile. Name, email, phone, role, and authentication identifiers (via our provider, Clerk).
• Application & tenancy. Information you submit in a rental application or tenancy, which may include contact details, date of birth, current address and housing status, residence and employment history (employer name, length of employment), the name of the bank you use (never account numbers), self-reported income, a self-reported credit score, references, and supporting documents you choose to upload (such as pay stubs or a screenshot of your credit score). Self-reported details are provided by you and are not verified by Zenant.
• Financial & verification. When you verify income through Plaid, Plaid authenticates you with your financial institution and returns verified results. We do not receive or store your bank login credentials, account numbers, or statements, only derived facts (e.g., verified/estimated monthly income, employer name, status). Identity verification via Stripe Identity returns only a result. Payments, including the rental application fee, are processed by Stripe; we never receive or store full card or bank-account numbers, only tokens and metadata. Zenant does not perform credit reports, criminal background checks, or consumer reports, and does not collect Social Security numbers. A self-reported credit score you type into an application is your own statement, not a consumer report, and Zenant does not pull or verify it.
• Documents & communications. Leases and uploaded/signed documents (via SignWell), messages, and maintenance requests.
• Technical & usage data. Log, device, and security-event data.

2. How we use information

To provide and secure the Service; verify income and identity with your consent to support rental decisions made by the landlord; process rent and subscription payments; send transactional messages; prevent fraud and abuse; and comply with legal obligations. We do not sell personal information, and we do not use Plaid-derived data for advertising or any purpose other than the verification you requested.

3. Consent

Before bank-linked income verification or identity verification, we present a clear notice and obtain your affirmative consent to the collection, processing, and storage of the relevant data for the stated purpose, and we record that consent. You may decline verification steps; some features may then be unavailable.

4. How we share information

We share information only as needed to operate the Service: with the landlord you are applying to or renting from; with service providers that process data on our behalf under contract: Plaid (income), Stripe (payments/identity), Clerk (authentication), Cloudflare (document storage), SignWell (e-signature), Resend (email), Twilio (SMS), and Vercel/Railway (hosting); for legal reasons; or in a business transfer. Each provider receives only the data necessary for its function.

5. SMS and mobile phone numbers

If you provide a mobile phone number and opt in to SMS notifications, Zenant and/or your landlord may send transactional and property-management text messages, including rent reminders, payment-related notices, maintenance updates, lease-related notices, landlord-to-tenant message notifications, and property announcements. Message frequency varies based on your rental activity and landlord communications. Message and data rates may apply. You may opt out at any time by replying STOP, and you may reply HELP for help.

We do not sell, rent, or share mobile phone numbers or SMS consent information with third parties or affiliates for marketing or promotional purposes. We may share mobile phone numbers with service providers, such as Twilio, only as necessary to deliver SMS messages and operate the Service.

6. Security

We protect information with encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, least-privilege data scoping, private document storage with short-lived authenticated links, and signature- verified webhooks. No method is 100% secure, but we maintain safeguards and an incident-response process.

7. Retention & deletion

We retain personal information only as long as necessary to provide the Service and meet legal, tax, and financial-record obligations, after which it is deleted or de-identified. You may request access to or deletion of your information (Section 8). Records necessarily retained by our processors are governed by their policies.

8. Your rights

Depending on your location (e.g., under US state privacy laws / CCPA, or GDPR where applicable), you may have the right to access, correct, delete, or port your information, withdraw consent, and object to or restrict certain processing. Contact support@zenantapp.com. For Plaid data, see Plaid's End User Privacy Policy.

9. Children, international users & changes

The Service is not directed to children under 18. It is operated in the United States; if you access it from elsewhere, your information will be processed in the U.S. We may update this Policy and will post material changes with a new effective date.