What is public
Your public profile uses your first name and last initial, selected affiliation, and document badges. Public maps show approximate areas rather than street addresses. Personal email, phone, emergency contacts, and uploaded verification documents are private.
Document verification
Verification documents are encrypted and stored privately for authorized staff review. They are removed after a review decision or after 30 days, unless a legal hold applies. Limited review results, document hashes, status, expiration, and review notes remain. Identity verification is required before lease signing. Badges are not credit scores or recommendations about housing eligibility.
Private records and retained evidence
Executed agreements, signing audits, mutually acknowledged receipts, and exported evidence are stored in a separate encrypted Firebase evidence bucket with a locked six-year retention policy. Verified storage configuration is required for live signing. The public dossier verification page exposes hashes and issuance dates, not personal records.
Account deletion and legal holds
You may request account deletion from your profile. Eligible public and account data is removed or anonymized within 30 days. Evidence subject to legal retention remains separate. An administrative legal hold suspends deletion until the hold is released.
Offline access on your device
Saving an arrival pass stores private move-in details on your device. Use a trusted device and clear private offline data before sharing it. Offline receipt drafts sync only when the correct account is signed in. Signing out clears private device records.
No sale of personal information
HeavenRental does not sell or rent your personal identity information. Provider access is limited to the services needed for the platform.
Messages and scam prevention
We retain all accepted in-app messages for scam investigation, disputes, and legal requests. Deleting your account anonymizes eligible profile data but does not erase conversation text or its audit history. Participants can access their conversations; authorized staff can access user chat history for safety, support and legal review, with access recorded in the audit trail. Links are blocked before a message is stored. Sent and received messages also determine eligibility for the paid-plan money-back policy.
Signup connection records
We record the IP address provided by our hosting infrastructure when you register, including first-time Google sign-in. Authorized staff can inspect this private record for account safety. IP addresses can identify a shared or proxied connection and do not establish a person's identity or precise location. Eligible signup IP data is cleared during account anonymization, unless a legal hold applies.