Last updated: 11 August 2026 · Version 1.0
RenteRoo is built and run by 4Real Estate Limited. A handful of specialist companies provide the infrastructure underneath it. Each one is bound by written terms no less protective than our own Data Processing Agreement, each may only use data to provide their service to us, and we remain fully responsible to you for what they do.
We give 30 days' notice before adding or replacing any of them. You can object — see Schedule 1 §8.
| Supplier | What it does | What it can see | Where it processes |
|---|---|---|---|
| Supabase | Our database, file storage and sign-in | Everything you record: account details, tenancy and property records, documents, photographs, messages | UK — London ✅ |
| Vercel | Hosting — runs the application and serves the pages | Data passing through requests as pages are served; it is not a store of record | UK — London ✅ |
| Resend | Sends our emails — invitations, reminders, the weekly digest, password resets | Names, email addresses and property addresses, inside the emails it sends | EU — Ireland ✅ |
| Upstash | Rate limiting — stops abuse of sensitive actions | Pseudonymised identifiers only. No names, no content, no documents | UK — London ✅ |
| Sentry | Error monitoring — tells us when something breaks | Technical error information. Request bodies, query strings, cookies, tokens, file paths, names and message content are excluded before anything is sent | EU ✅ |
Nobody on this list is allowed to use your data for their own purposes, to sell it, or to train an AI model on it.
We look up postcodes. When you type a postcode, we send that postcode and nothing else to api.postcodes.io — a free, open-data service run over public Ordnance Survey and ONS data — to fill in the town and county and to work out which country the property is in.
We send no name, no address line, no account identifier and nothing about you. ⚠️ There is no agreement with them, because there is nothing to agree to — the service is free, needs no account and has no contract.
It is listed here anyway, because this page is only worth reading if it is complete.
Notifications on your device are sent by RenteRoo directly. We hold our own signing keys and there is no third party in between — nothing to add to the table above.
The message travels through your browser's own push service — Apple, Google or Mozilla, depending on the browser you use — because that is the only way any website can reach a device. They carry it; they cannot read it. Every message is encrypted with keys that only your device holds.
Last updated: 20 August 2026.