Security
How we protect your data
You keep tenant details and identity documents in SetURent. Here is exactly what stands between that data and everyone else.
Your account's data stays yours
- Every record belongs to exactly one account, and database queries are scoped to that account in two separate layers.
- Uploaded documents are stored under keys namespaced by account and tenant, and ownership is verified before a file is attached to a tenant.
Access you control
- Role-based permissions per section, at four levels: none, view, manage, or full.
- Owners invite team members and decide what each person can see or change.
- One email is one login. A person can belong to several accounts and switch between them without sharing a password.
Sign-in and sessions
- Passwords are hashed before they are stored.
- Every login is a server-side session with its device, IP address, and last active time. You can review your sessions and end any of them.
- Changing a password or suspending a user ends all of that user's sessions.
- Repeated sign-in attempts are rate limited.
An audit trail
- Every change is recorded with who made it, what changed, and when.
- Reminders sent, failed, or skipped show up in the same history.
Payments
- Subscription payments run through Razorpay. Card and bank details are entered with Razorpay and are not stored by SetURent.
- Payment notifications are verified by signature, and repeated deliveries of the same event are ignored.
Careful with outbound messages
- Reminder channels cannot point at private or internal network addresses. This is checked when you save a channel and again before every send.
- Each reminder is sent once, even if a background job runs twice.
- You bring your own SMS, WhatsApp, or webhook gateway, so message delivery stays under your own account with that provider.
This website
- No advertising or analytics trackers. The only thing stored in your browser is your light or dark theme choice.
- We do not sell personal data.
- The website and the app are served over HTTPS.
Shared responsibility
What you can do on your side
Good tools only go so far. A few habits keep your account safe.
- Use a strong, unique password for your login.
- Give team members only the access they need, and remove people who no longer need it.
- Review your active sessions from Profile, Security, and end any you do not recognise.
- Only upload tenant documents you have the right to store.
Found a security issue?
If you think you have found a vulnerability, or you have a security question, write to us with the details. We read every report and will get back to you.
[email protected]Keep your rentals organised and your data protected
Tenant records, documents, and payments in one place that keeps every account separate.
- 14-day free trial
- No card needed
- Cancel anytime