Privacy for the rent pilot
Rent Management is a Qovah product. Read the Qovah privacy policy and terms. This page explains the rental pilot's current data use.
Accounts and rental records
We keep landlord account details, organization membership and roles, properties, tenant contact details, agreements, rent schedules and payment-provider results to operate the landlord's workspace. Tenants do not need an app account. Authorized organization members can access records according to their permissions.
When an owner connects a number, we keep its business-account identifiers and encrypted access credentials. We process new messages, sender details, delivery events and personal phone-app message echoes to route conversations and record human control. Historical chat and contact synchronization payloads are discarded. The pilot does not currently download message attachments, send automated replies or run AI on tenant messages.
Payments and private receipt links
Payments currently use Paystack's test environment. Payment results and receipts are kept with the rental records. Card details and mobile-money PINs are handled by the payment provider. A private receipt link grants access to the tenant's app-recorded history within one organization; anyone holding it can use it until it is replaced or revoked.
Service providers
Convex stores application records and runs backend functions. Cloudflare hosts the frontend and sends account/invitation email. Meta provides WhatsApp services, and Paystack processes sandbox payments. The site loads fonts from Google Fonts. If analytics or error reporting is configured, PostHog or Sentry may process usage or diagnostic information; private receipt pages suppress PostHog events and session recording is disabled. Tenant messages are not currently sent to an AI provider.
Access, correction and deletion
Use Qovah support and choose Privacy and your data to request access, correction or deletion. Identify Rent Management and the relevant organization. We must verify that the request concerns your own data or an organization you are authorized to manage. Do not send passwords, access tokens, private receipt links or unrelated chat history.
Disconnecting WhatsApp removes the stored connection credential and stops this workspace's connection; it does not erase existing conversations or rental records. Archiving records also preserves their history. Deletion requests require a separate review, including any records that must be retained for legal obligations or disputes. The pilot has no automatic age-based purge of rental or message records.