Who we are
RentManager is operated by RentManager NZ Limited (NZBN 9429053511362), a New Zealand registered company providing property management software to residential landlords in Australia and New Zealand.
What information we collect
- Account information: Name, email address, phone number (optional), company name (optional).
- Property information: Addresses, tenancy details, rent amounts, bond details.
- Tenant information: Names, contact details, tenancy dates. You are the data controller for tenant information you enter.
- Bank transaction data: Imported via CSV upload or Open Banking (CDR) on a read-only basis. Transaction date, amount, description, and counterparty.
- Address data: We use the Geocoded National Address File (G-NAF) for address validation. This is publicly available reference data.
- Usage data: Pages visited, features used, login times. Used to improve the service.
How we store your data
Your data is stored on servers in New Zealand (AWS ap-southeast-6, Auckland). RentManager NZ Limited is a New Zealand company and New Zealand is recognised under APP 8 as providing substantially similar privacy protections to Australia. We comply with both the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), and the New Zealand Privacy Act 2020.
All data is encrypted in transit (TLS 1.3) and sensitive fields (bank tokens) are encrypted at rest (AES-256-GCM).
How we use your information
- To provide the property management service you signed up for.
- To match bank transactions against rent schedules.
- To generate tax reports (ATO rental property schedule).
- To send service notifications (arrears alerts, reminders).
- To improve the product based on usage patterns.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
Open Banking (Consumer Data Right)
If you connect your bank account via CDR Open Banking:
- We access account information and transaction history on a read-only basis.
- We cannot make payments, transfer money, or modify your account.
- You can disconnect at any time from Settings - Bank Sync.
- On disconnection, your CDR access tokens are deleted and bank data is purged.
- CDR data is handled in accordance with the CDR Rules and Privacy Safeguards.
Sharing with third parties
- Stripe: Payment processing. Stripe handles card details directly; we never see your full card number.
- Xero: If you connect Xero, transaction data is synced to your Xero account at your request.
- AWS: Infrastructure provider. Data stays in the Sydney region.
- No other third parties receive your personal information.
Your rights under the Privacy Act 1988
Under the Australian Privacy Principles, you have the right to:
- Access your personal information [APP 12].
- Correct inaccurate information [APP 13].
- Know how your information is collected, used, and disclosed [APP 1 and 5].
- Complain if you believe we have breached the APPs
To exercise these rights, contact us at support@rentmanager.nz.
Data export and deletion
You can download all your data at any time from Settings - Account - Download My Data. You can delete your account from Settings - Account - Delete Account. Deletion removes all your data within 30 days.
Data breach notification
In the event of a data breach likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.
Complaints
If you have a privacy complaint, contact us at support@rentmanager.nz. If you are not satisfied with our response, you can lodge a complaint with the OAIC.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notification.