Privacy Policy

Last updated: 9 August 2026

1. Who we are

RentOS 365 is a subscription software service for managing children's entertainment rental businesses, operated by Individual Entrepreneur Creiciman Iurii, registered at 19/5 Zapadniy Lane, Tiraspol, Moldova.

We are the controller for the personal data we collect about visitors to rentos365.app and users of the RentOS application.

For any question about privacy or your personal data, write to info@rentos365.app.

2. What data we collect

• Account data — name, email address, password (stored hashed), phone number, business name, preferred language and time zone.
• Employee records you create — the names, PIN codes and avatars of the employees you add to your RentOS tenant.
• Business data you enter — locations, zones, assets, tariffs, cash operations, tickets, client records and any comments you write.
• Support communications — the content of messages you send us through the support portal or by email.
• Usage and technical data — IP address, browser and device type, pages visited, actions taken in the application, and error logs.
• Cookies — see section 9.

We do not collect or store your card details. Payment data is collected independently by Paddle, which acts as a separate controller for it.

3. Why we use it, and on what legal basis

• To create and run your account and provide the service — account data, employee records, business data. Legal basis: performance of a contract.
• To provide customer support — support communications, account data. Legal basis: performance of a contract.
• To keep the service secure and prevent fraud and abuse — usage and technical data. Legal basis: our legitimate interest in protecting our service and our users.
• To improve the product — aggregated usage data. Legal basis: our legitimate interest in understanding how the service is used.
• To send service messages (billing notices, security alerts, material changes). Legal basis: performance of a contract.
• To send marketing messages. Legal basis: your consent, which you can withdraw at any time.
• To meet accounting, tax and other legal obligations. Legal basis: legal obligation.

4. Who we share it with

• Paddle, our Merchant of Record, for the sale of subscriptions, subscription management, payment processing, invoicing and tax compliance. Paddle handles payment data as an independent controller; its privacy notice is published at paddle.com/legal/privacy.
• Service providers and subprocessors that help us run RentOS: hosting and infrastructure, email delivery, and support tooling. They may process personal data only on our instructions.
• Messaging platforms — if you enable the optional Telegram integration, the data you choose to send through it is transmitted to Telegram.
• Professional advisers — legal, accounting and audit advisers, where necessary.
• Authorities — where required by law, or to establish, exercise or defend legal claims, or to protect the rights and safety of others.

We do not sell personal data.

5. International transfers

Our infrastructure and some of our service providers are located outside your country, and personal data may be transferred there. Where such transfers involve data protected by the EU or UK GDPR, we rely on appropriate safeguards, such as standard contractual clauses or an adequacy decision.

6. How long we keep it

We keep your account and business data for as long as your subscription is active. After termination, data remains available for export for 30 days and is then deleted or anonymised, unless we are required to keep it longer to meet accounting, tax or other legal obligations. Support messages are kept for up to three years. Server and security logs are kept for up to twelve months.

7. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with a supervisory authority — in Moldova, the National Center for Personal Data Protection; elsewhere, your local data protection authority.

To exercise any of these, write to info@rentos365.app. We will respond within one month, extendable where the law allows and where the request is complex.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed password storage, role-based access controls, and restricted administrative access. No system is perfectly secure, but we work to reduce risk and to respond quickly if something goes wrong.

9. Cookies

We use:

• Essential cookies — needed for login, session handling, the shopping cart and language selection. The service does not work without them.
• Analytics cookies — to understand how the site is used, in aggregate.

You can manage or delete cookies through your browser settings. Blocking essential cookies will prevent you from signing in.

10. Changes to this notice

We may update this notice. The current version is always published on this page with its "last updated" date. Where changes are material, we will notify you.

11. Contact

Individual Entrepreneur Creiciman Iurii, 19/5 Zapadniy Lane, Tiraspol, Moldova. Email: info@rentos365.app.