Security & trust
Security and privacy at RentVault Pay
How we protect rental records
Plain answers about where rent goes, how information is protected and who receives it.
Your rent goes to your landlord
RentVault Pay helps landlords and agencies manage rental records and track payments. Rent goes directly to your landlord’s own M-PESA Paybill, Till, bank account or another approved landlord-controlled account.
RentVault Pay never receives, holds or moves your rent. Platform fees are separate from rent payments.
How we protect information
We use encryption to protect sensitive information such as national IDs, KRA PINs and stored payment credentials.
Access checks use your workspace and role to limit which records you can view or change. Phone-number masking helps reduce the personal information shown in notification logs.
Platform administrators must complete an additional security check before accessing protected operator functions.
Where tenant verification is enabled, it uses a one-time code with an expiry time.
No system is entirely secure. Keep your password and verification codes private.
Who receives information
Replit and Google Cloud host RentVault Pay, including our database and file storage, in the United States. They hold the account, property, tenancy, payment-record, uploaded-file and security information needed to run the platform.
Celcom Africa (Kenya) sends our SMS messages, including verification codes, using your phone number and the message content.
Resend (United States) sends our emails, including verification codes, using your email address and the message content.
Anthropic, through Replit, is used only when your landlord or agency chooses to use our optional AI drafting tools. It may then receive your name, property and tenancy details, payment or arrears information, and the drafting instructions. It processes this in the United States and other countries.
Cloudflare stores backup copies of uploaded files in its Oceania (Australia) region.
Safaricom (Kenya), where M-PESA is used, receives the phone number, amount, payment reference and transaction details needed to request and confirm payment into your landlord's own account.
Your landlord or agency and its authorised staff receive the tenancy information needed to manage your tenancy.
Each recipient receives only what it needs for its service. We will add any new recipient to this list before we use it.
Your privacy rights
Our Privacy notice explains how we handle personal information, the reasons for processing it, and your rights under Kenya’s Data Protection Act, 2019.
For a privacy request, contact dpo@rentvaultpay.com.
Report a security concern
To report a suspected security problem, email support@rentvaultpay.com.
Describe what happened and which page was affected. Do not send passwords, verification codes, payment credentials or copies of identity documents.