Rentlark — Privacy Policy
Version 1.0 · Last updated: October 31, 2026
1. Who we are
Rentlark is sold by Tomer Avni, an individual seller based in Israel, operating as Autonomo Labs ("we", "us"). We are the controller of the personal data described in this policy. Privacy contact: rentlark@mail.grokbot.com.
This policy explains what we do with personal data when you visit the pages of our website (rentlark.pages.dev), buy Rentlark, or contact support.
2. The short version
- Gumroad handles checkout and payment. It collects your payment details and other purchase data under its own privacy policy. We never see your full card number.
- We receive your name and email (and basic order details) from Gumroad so we can deliver Rentlark and support you. If you download our free checklist through Gumroad, Gumroad asks for your email, and we receive it too; we don't use it to send you marketing email.
- The templates run in your own spreadsheet app. We do not receive the property, tenant, or financial data you enter into them, unless you choose to send it to us (for example, in a support request).
- No marketing email unless you opt in. We don't run a marketing email list, and we don't send you marketing email unless you opt in through Gumroad. We don't sell your personal data.
- No ads or cookies on our website, and only cookieless visit statistics. Our website pages set no cookies and run no advertising or cross-site tracking. They use Cloudflare Web Analytics to count visits (see §5).
- Support emails are read by an AI assistant, which drafts replies; Tomer Avni checks and sends every reply (see §6).
- We don't train AI models on your data ourselves. Support emails are handled by our AI support provider under its own terms, and we have no separate agreement with it about AI training (see §6).
3. Gumroad (merchant of record)
Purchases are made through Gumroad, which acts as merchant of record. Gumroad collects data such as your name, email, payment information, billing country/location, and IP address to process payment, prevent fraud, calculate and remit taxes, and comply with law. Gumroad generally processes this data as an independent controller under its own privacy policy: https://gumroad.com/privacy. We do not control Gumroad's processing. Please read its policy.
Gumroad shares certain order data with us as the seller (see §4).
4. Data we collect and why
| Data | Source | Why we use it | Legal basis (EEA/UK) |
|---|---|---|---|
| Name, email, product bought, price paid, purchase date, order ID, country, and any information you add at checkout | Gumroad | deliver Rentlark, give access to updates, provide support, handle refunds, keep sales and tax records | contract; legal obligation |
| Email (and name, if you give it), product, price paid (usually $0), date, and country when you download our free checklist | Gumroad | deliver the checklist, count downloads, provide support | contract |
| Support messages and anything you attach | you | answer your request | contract; legitimate interests |
| Sales and product-page statistics (for example, number of views and sales, and referring sites), shown to us by Gumroad in its seller dashboard | Gumroad | understand how the product page performs | legitimate interests |
| Request data when you open our website pages (IP address, user agent, requested URL, time) | your browser, processed by our hosting provider | deliver the pages and keep them secure | legitimate interests |
Marketing email. We don't run a marketing email list. We don't send you marketing email unless you opt in through Gumroad, and you can unsubscribe at any time. We may email you about your purchase, for example to answer a support request. After you buy Rentlark, we may send you one follow-up email asking how Rentlark is working for you and inviting an optional rating. It contains no advertising, and you can opt out. If you only download the free checklist, we don't email you (except to answer you if you contact us), unless you opt in through Gumroad.
Analytics. Our website pages use Cloudflare Web Analytics, a cookieless visit-statistics tool from Cloudflare, Inc. (see §5). We use no other analytics, advertising, or tracking tools.
Data you enter in the templates. The spreadsheets run in your own copy of Google Sheets or Microsoft Excel. We have no access to that data. Please don't send us tenant personal information (names, Social Security numbers, screening reports, bank details) in support requests; if you do, we use it only to resolve your request, and we ask our AI platform provider to delete it (see §9). We can't currently delete support emails ourselves.
5. Hosting of our website
Our website pages are hosted on Cloudflare Pages, a service of Cloudflare, Inc. When you open them, Cloudflare processes standard request data (your IP address, user agent, the requested URL, and the time of the request) to deliver the pages and for security logs. The pages also load Cloudflare Web Analytics, a small script that reports the page viewed (without any query string), the referring page, your browser, operating system and device type, and page-load timings; Cloudflare also derives your approximate country from the request. Cloudflare states that it does not use cookies or local storage for this, does not fingerprint visitors, and does not use the IP address to identify or track visitors. We see only aggregated statistics, never individual visitors, and we use them only to understand how many people visit and which pages they read. The pages set no cookies and run no advertising or cross-site tracking. Cloudflare processes this data under its own terms and privacy policy (https://www.cloudflare.com/privacypolicy/).
6. Support
Support emails go to rentlark@mail.grokbot.com. That inbox is run by an AI assistant on the Grok Bot platform, provided by Anysphere, Inc. (the maker of Cursor), which is our service provider for support. The AI assistant reads your message and drafts a reply, and Tomer Avni personally checks and sends every reply. Your Gumroad receipt lists this same support address; please email it directly rather than replying to the receipt. We use your message only to answer you and to fix problems with Rentlark. To track issues, we may share a summary of your request, with your name, email, and other personal details removed, with the other AI agents that help us run Rentlark on the same platform. Support explains how to use Rentlark; it is not legal, tax, or accounting advice. Want a person instead? Write "human" in your email, and Tomer Avni will answer you personally (the AI assistant still receives your email first, because it runs the inbox). We do not train AI models on your data ourselves. Our AI platform provider processes support emails under its own terms (Grok Bot Terms, Cursor Terms of Service and Cursor Privacy Policy), and we have no separate agreement with it about AI training. Please don't send tenant names, Social Security numbers, bank details, screening reports, or other sensitive data in support emails (see §4 and §9).
7. Who we share data with
We do not sell personal data, and we do not "share" it for cross-context behavioral advertising (in the CCPA/CPRA sense). We use no advertising pixels. We use these service providers:
| Function | Provider | Data |
|---|---|---|
| Checkout, payment, tax, file delivery | Gumroad (merchant of record; independent controller for its own processing) | purchase data |
| Hosting of our website pages | Cloudflare, Inc. (Cloudflare Pages) | standard request data (IP address, user agent, requested URL, time) for delivery and security logs; cookieless visit statistics (Cloudflare Web Analytics), which we see only in aggregate |
| Support inbox (rentlark@mail.grokbot.com) and AI support assistant | Grok Bot, provided by Anysphere, Inc. (Cursor); service provider for support; data may be processed in the US; its model subprocessors are governed by its own terms | support emails and the replies to them |
We may also disclose data to professional advisers (such as our accountant or lawyer), to authorities where legally required, or to a successor in a merger or acquisition.
8. International transfers
We are based in Israel, which has an EU adequacy decision. Our providers may process data in the US and elsewhere:
- Gumroad processes data in the US; for transfers from the EEA, the UK, and Switzerland it relies on the European Commission's standard contractual clauses.
- Cloudflare, Inc. processes request data for our website pages in the US and in other countries where its network operates. Cloudflare states that it is certified under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework, and that it relies on the European Commission's standard contractual clauses for other transfers.
- Support emails are processed in the US by our AI platform provider (Grok Bot, provided by Anysphere, Inc.). We have not confirmed the specific transfer safeguard it uses for this data.
9. Retention
- Order records (including refund and chargeback records): kept by Gumroad under its own policy, and in our sales and tax records for 7 years after the end of the tax year in which the sale took place, as required for Israeli tax and bookkeeping purposes.
- Support messages: we keep them for as long as needed to help you, generally up to 12 months from your last contact with us. They are stored by our AI platform provider, and we can't currently delete them ourselves, so the provider may keep them longer under its own terms. If you ask us to delete them, we'll ask our provider to delete them and tell you the result.
- Tenant or other personal data you send us that we don't need: please don't send it (see §4). If you do, we'll ask our provider to delete it once your request is resolved, and tell you the result.
- Request data and visit statistics for our website pages: processed by Cloudflare under its own terms. We don't keep our own copy; we can view only aggregated visit statistics in our Cloudflare account, which Cloudflare currently keeps for about 6 months.
- Free checklist downloads: the email and download record stay in Gumroad's customer records under its policy, and in our Gumroad seller account. We don't email that list, export it, or have any AI assistant read it; we see only total download counts. To ask for your download record to be removed, email rentlark@mail.grokbot.com and Tomer Avni will pass the request to Gumroad, which handles deletion under its own policy.
- Marketing email: if you opt in, until you unsubscribe (a record of the unsubscribe may be kept so you aren't emailed again).
10. Your rights
Depending on where you live (for example, the EEA/UK under GDPR, Israel under the Protection of Privacy Law, or California and other US states), you may have the right to access, correct, delete, or port your data, object to or restrict processing, withdraw consent, opt out of sale/sharing (we do neither), and not be discriminated against for using these rights. You may also complain to your data protection authority. For data Gumroad holds as merchant of record, contact Gumroad as well. Requests: rentlark@mail.grokbot.com. We may need to verify your identity. Support emails are stored by our AI platform provider and we can't currently delete them ourselves: if you ask us to delete them, we'll pass your request to the provider and tell you the result (see §9). We keep order records for the period in §9 where the law requires it, even if you ask us to delete them.
11. Cookies
Our website pages set no cookies and store nothing on your device, so there is nothing to accept or decline. The only script they run is Cloudflare Web Analytics, which counts visits without cookies (see §5). Gumroad's product, checkout, and library pages use Gumroad's own cookies under its policies (https://gumroad.com/privacy). Rentlark's spreadsheet files contain no scripts, macros, or tracking.
12. Age
Rentlark is for people 18 and over. We do not knowingly collect data from anyone under 18.
13. Security
We use reasonable safeguards and keep the data we hold to a minimum. No method of transmission or storage is fully secure.
14. Changes and contact
We will post updates on this page with a new "Last updated" date and version number and, for material changes, notify buyers by email where appropriate. Contact: rentlark@mail.grokbot.com.
See also our Terms of Sale and Refund Policy.