Privacy Policy

1. Who this policy covers

Rentelya ("Rentelya", "we", "us", "our") is a property and tenancy management platform for the Malaysian rental market, operated by Skyrious Technologies Sdn Bhd (Company No. 202001019184), a company registered in Malaysia, of ST1-36-14, Menara Solstice, Persiaran Bestari, Cyber 11, 63000 Cyberjaya, Selangor, Malaysia.

This policy explains what personal data we collect through rentelya.com and the Rentelya platform — including the tenant portal at app.rentelya.com, landlord portal at landlord.rentelya.com, admin portal at admin.rentelya.com, and the Rentelya iOS and Android applications used by landlords, tenants and platform administrators — why we collect it, how long we keep it, and the rights available to you under the PDPA.

If you are a tenant, your landlord has usually already given us some of your information before you ever sign in yourself — see "Tenants and the landlord relationship" below.

2. Information we collect

Depending on whether you use Rentelya as a landlord, a tenant, or both, we collect:

Account information

Full name, email address, phone number, and a password — stored as a one-way hash, never in plain text. Collected from landlords, tenants and administrators.

Property information

Property and unit addresses, unit details, and photos of units — entered by landlords.

Tenancy information

Lease start and end dates, monthly rent, deposit, monthly utilities, rent due day, the signed tenancy agreement, and identity document scans (for example NRIC or passport) attached to a lease — entered by landlords, about their tenants.

Payment records

Rent amounts, payment dates, bank transfer references, and photos of payment receipts. Rentelya does not process payments — money moves directly between tenant and landlord; we only record that it happened.

Landlord receiving account

Bank name, account holder name, account number and optional payment instructions entered by a landlord. These details are shown to the tenants of that landlord's rentals so they know where to transfer payment. Landlords can update or remove these details in Account settings.

Utility bills

TNB, water and other bill amounts and meter readings, and photos of the bills, logged per lease.

Maintenance requests

Photos and written descriptions of repair issues raised by a tenant, and the landlord's replies.

Communications

Messages you send us, for example by email, and any information you give us in them. For in-app landlord–tenant chat, we store message text, the participating account IDs, send times and read status to deliver conversations and unread counts. We also store messaging-rule acceptance, blocked contacts and abuse reports. Authorised Rentelya administrators can review reported content to investigate abuse and remove content or suspend accounts.

Usage and audit data

Sign-in timestamps, device/platform labels used to identify signed-in sessions, and an audit log entry — who, what, when, and IP address — recorded for every create, update or delete made in the system.

3. How we use your information

To provide the service — create your account, and show your properties, leases, payments, bills and maintenance requests to you and, where relevant, to the other party to the tenancy.
To deliver private in-app messages between connected landlords and tenants, including message history and read receipts.
To keep the platform secure and accountable — the audit log, rate-limiting sign-in attempts, and detecting misuse.
To communicate with you — replying to a support request, and, where you have agreed to it, updates about Rentelya.
To meet our legal and accounting obligations, for example keeping financial records for the period required by Malaysian law.

We do not use your data for advertising, and we do not sell personal data to anyone.

4. Tenants and the landlord relationship

Most of a tenant's information reaches us because their landlord entered it, to record a lease, a payment, a bill, or to invite the tenant to their own sign-in. In that relationship, the landlord decides what is recorded about their tenant, and we process it to provide the service to that landlord and to give the tenant their own view of their tenancy. If you are a tenant with a question about why particular information was recorded, your landlord is usually the first point of contact — you are also welcome to contact us directly using the details below.

We do not sell your personal data.
Rental records are restricted to the relevant landlord and tenant accounts. An in-app conversation is visible to its two connected participants; a tenant's other landlords cannot access it.
We share information with service providers who help us run Rentelya, for example our hosting and file storage provider. They only process data on our instructions, and only to the extent needed to provide their service to us.
We may disclose information if required to by law, regulation, court order, or a lawful request from a public authority.
If Rentelya is ever involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to this policy continuing to apply to it.

6. Where your data is stored and how it is protected

Rentelya runs on cloud infrastructure, which means your data may be processed on servers outside Malaysia; where that happens, we take steps to keep an equivalent standard of protection. We apply security measures including: passwords stored as one-way hashes rather than plain text; encrypted connections (HTTPS); parameterised database queries to prevent injection attacks; session cookies configured to reduce the risk of theft or forgery; rate-limiting of sign-in attempts; and uploaded files stored under randomly generated names in a location that cannot execute code. No system is completely secure, and we keep investing in these protections as the platform grows.

7. How long we keep your data

In-app chat history remains available while the landlord–tenant connection exists, including after a lease ends. Removing that connection or deleting either participant's account removes that conversation and its messages from the app.

We keep your account and tenancy data for as long as your account is active. After an account is closed, we keep tenancy and payment records for a further period to meet Malaysian accounting and legal obligations — typically up to seven (7) years for financial records — after which we delete or anonymise them, unless we are required or permitted by law to keep them for longer. You can ask us to delete your data sooner; see "Your rights" below — we will tell you if any of it needs to be kept for a legal reason instead.

8. Your rights under the PDPA

Subject to the exceptions set out in the Act, you can ask us to:

give you access to the personal data we hold about you;
correct data that is inaccurate or incomplete;
withdraw consent to processing that relies on consent, and limit further processing;
delete personal data we no longer have a lawful reason to keep.

To exercise any of these, contact our data protection contact below. We will respond within 21 days, as provided for under the PDPA; if we need more time we will tell you why. There may be cases where we cannot fully comply — for example, where we are legally required to keep a financial record — and if so we will explain why.

9. Cookies

rentelya.com (this website) does not use cookies, analytics or advertising trackers. The Rentelya web platform uses one essential cookie to keep you signed in. The mobile applications keep an authentication token securely within the app's local storage so you remain signed in. Neither is used for advertising or cross-site tracking.

10. Children

Rentelya is a business tool for managing tenancies and is not directed at children. We do not knowingly collect personal data from anyone under 18.

11. Changes to this policy

We may update this policy as the platform changes. We will change the "Last updated" date above, and if a change is significant we will let registered users know.

12. Contact us

General questions about your account: sky@skyrious.com
Data protection / PDPA requests: sky@skyrious.com
Account deletion requests: rentelya.com/delete-account

Skyrious Technologies Sdn Bhd (Company No. 202001019184)
ST1-36-14, Menara Solstice, Persiaran Bestari, Cyber 11,
63000 Cyberjaya, Selangor, Malaysia