1. Scope
This policy covers the RentSign website, account area and mobile application. It describes information needed for access, document preparation and signing, payments and support. Separately accessed websites and applications may process information under their own policies.
2. Information processed
Account information: telephone number, full name, email, individual or business identification number, language and details you provide. Google sign-in supplies an account identifier, profile details and authentication confirmation; RentSign does not receive your Google password.
Contracts and assets: text, template fields, PDFs, attachments, property information, parties, representatives and organisations. Material may include other people’s personal data. Provide only necessary information with a lawful basis for disclosure.
Operational information: signing statuses and results, document and transaction identifiers, plans, invoices, amounts and payment confirmations. RentSign forms do not request full card details or security codes; the payment page handles these under its own rules if needed for the selected method.
Technical information: IP address, browser and device details, request times and outcomes, errors, session and security data. Enabling notifications adds delivery tokens and settings. Support requests include your message and necessary supporting material.
3. Purposes and grounds
Information supports sign-in and recovery, profiles and organisations, preparing documents, sharing them with selected participants, starting signatures and delivering results, recording payments, support and abuse prevention.
Processing relies on consent, entering into and performing agreements and other applicable lawful grounds. Information must not be used for incompatible purposes without a separate basis. Required sign-in consent does not authorise advertising or optional analytics.
4. Recipients
Selected contract participants and authorised organisation members receive documents and necessary details according to their access. Recipients may retain a copy; deleting your account does not by itself delete copies lawfully held by other parties.
Operations use infrastructure and storage suppliers, Google/Firebase for authentication and notifications, a WhatsApp code-delivery service, a payment service, and electronic-signature and document-exchange systems including SIGEX and eGov mobile. The function determines the information disclosed. Optional Google Analytics is activated only by a separate choice.
Information may also be disclosed to competent authorities on lawful grounds and, as necessary, to parties involved in protecting rights or resolving disputes. This policy does not authorise public distribution of contracts or sale of their contents.
5. Processing locations and international transfers
Storage and transfers are subject to Kazakhstan law, including requirements on the location of personal-data databases. International authentication, notification and analytics services may process information outside Kazakhstan. Such transfers require lawful grounds and safeguards; accepting this policy does not waive those requirements.
You may ask the operator where a particular data category is processed and who receives it. Before introducing features that materially change data categories or recipients, processing information must be updated and separate consent obtained where necessary.
6. Retention
Account information is processed during service use and afterwards only on a specific lawful basis. Retention of documents, signing evidence, payment records and enquiries depends on the processing purpose, mandatory record-keeping periods, dispute resolution and protection of participants’ rights.
Deleting an account does not justify keeping all data indefinitely. Information no longer needed for a lawful purpose must be deleted or anonymised. Limited records may remain for mandatory accounting, fraud prevention or legal claims; their categories, grounds and applicable periods can be clarified with a deletion request. Backup retention and removal are also considered when handling the request.
7. Delete an account or data
In the app or web account, open Settings → Profile → Delete account. If you cannot sign in or have uninstalled the app, email info@bytegs.com with the subject ‘Delete RentSign account’ and your account telephone number or email. You may also request deletion of particular data. Do not send passwords, one-time codes, private signing keys or full card details.
Proportionate ownership verification may be requested to protect the account. The response should explain the outcome, information to be deleted, and the grounds and periods for retained exceptions. Disabling access alone is not data deletion. Signed documents and records needed by other parties or by law are considered separately; deletion does not invalidate signatures.
8. Your rights and withdrawal
You may request processing information and access to your data, seek correction, blocking or deletion where applicable, withdraw consent and complain to the operator or a competent authority. Requests are handled within the procedures and time limits required by applicable law.
Withdrawal does not undo lawful prior processing or prevent processing on an independent lawful basis. Where information necessary for an operation can no longer be processed, that function may become unavailable. Declining analytics does not restrict sign-in, paid access or signing.
10. Security and device permissions
Access must be limited to authorised roles and operational necessity. Secure connections and access controls are used. No internet system can guarantee absolute security; the operator retains its statutory data-protection and incident-response obligations.
Files are transferred after user selection. Push notifications are separately enabled with device permission and may be disabled. Do not share temporary links or codes. Report suspected leaks or unauthorised access using the contacts below.
11. Children and policy changes
The service is not intended for independent use by people under 18. Report children’s information provided without an appropriate basis so it can be investigated and deleted where required.
Processing changes are reflected in a dated new version. Material changes are communicated before new processing begins; separate consent is sought where required. This policy is available in Russian, Kazakh and English.
Operator contact details
ByteGenix Software LLP, BIN 230840028818
Registered address: 16 Zhumeken Nazhimedenov Street, Almaty District, Astana, 010000, Republic of Kazakhstan.
info@bytegs.com+7 (701) 120-81-73bytegs.com