Built on trust, protected by design
Verification, privacy controls, secure authentication and active moderation are built into every part of RentWithoutBroker — from rentals to your society.
Twelve pillars of trust
Everyday protections for residents, owners and communities.
Verified Owners
Owners pass mobile, email and manual review before listings go live.
Verified Residents
Society members are approved by their committee before joining.
Verified Societies
Society registrations and claims are reviewed before activation.
Committee Approval
Committees approve who joins their society and control module access.
Role-Based Permissions
Fine-grained roles decide exactly what each member can see and do.
Privacy Controls
You choose what other residents can see about you.
Secure Authentication
Strong passwords, hashed storage, session protection and optional passkeys.
Data Protection
Your data is handled responsibly and never sold.
Report Abuse
One-tap reporting on any listing, post or profile.
Active Moderation
Fraudulent listings, spam and abusive content are removed.
Safe Marketplace
Resident-only marketplace with reporting and moderation.
Community Guidelines
Clear, enforced rules across every module.
Security, privacy & operations
The practices behind the platform.
Data Security
All data is stored on managed cloud infrastructure with row-level security in the database. Access is restricted to the roles that need it and every administrative action is audited.
Encryption
Traffic is encrypted with TLS 1.2+ in transit. Sensitive fields, including payment-gateway credentials, are encrypted at rest with AES-256-GCM. Passwords are stored as salted hashes and are never accessible in plaintext.
Authentication
Sign-in supports email + password with strong password rules, optional passkeys and 'remember-this-device' for trusted browsers. Sessions include idle-timeout, revocation and per-device visibility.
Role-Based Access Control
The permission engine grants module-level and action-level access per role and per society. Committees can invite members and assign permissions; every change is recorded in the audit log.
Backup & Disaster Recovery
The database is continuously backed up with point-in-time recovery. We regularly verify restore procedures and target recovery within a few hours of a major incident.
Privacy Commitment
We do not sell personal data. Society data is scoped to that society and never used for cross-society targeting. See the Privacy Policy for the full data map.
Compliance Practices
We operate under Indian law, including the IT Act 2000, IT Rules 2011 & 2021 and the Digital Personal Data Protection Act 2023 as applicable. We publish a Grievance Officer contact and process notices under the IT Rules.
Responsible Disclosure
Security researchers can report vulnerabilities to security@rentwithoutbroker.in. We acknowledge within 3 working days and coordinate remediation. Do not access other users' data during testing.
Platform Availability
The service is designed for high availability using managed cloud regions and edge networks. Planned maintenance is communicated in advance where possible.
Incident Response
We follow a documented playbook: detect, contain, investigate, notify affected users where required by law, remediate and publish a post-incident review for major events.
Data Protection
Retention periods for each category are listed in the Data Retention Policy. Account deletion is supported per the Account Deletion Policy.
Full details in our Security Policy, Privacy Policy, Data Retention Policy and Grievance Redressal Policy.
Report something
Use the in-app Report option, or reach us directly. We act quickly to protect the community.