Privacy policy
Last updated: July 7, 2026 · Versión en español
This is a courtesy translation. The Spanish version of this policy is the binding one.
ArriendoClaro (“the application”, “we”) is a rent-tracking tool for landlords who manage their own properties in Colombia. It keeps track of who has paid and who has not, reads payment receipts, drafts reminders, and calculates the legal rent increase. It never moves money, never touches bank accounts, does not compute taxes, and does not file anything with DIAN.
This policy explains which personal data we process, for what purpose, who we share it with, how long we keep it, and how you can exercise your habeas data rights under Colombia's Law 1581 of 2012 and Decree 1074 of 2015 (which compiled Decree 1377 of 2013).
Data controller: ArriendoClaro. Contact for personal-data matters: privacidad@arriendoclaro.com.
1. Who is responsible for what
There are two kinds of personal data in ArriendoClaro, and each party's role is different:
- Your account data (the landlord using the app): here ArriendoClaro is the controller of the processing.
- Your tenants' and third parties' data that you record (names, phone numbers, cédulas, payments): you, the landlord, are the controller of that data and must process it with its owners' authorization; ArriendoClaro acts only as a processor handling it on your behalf to provide the service.
2. What data we collect and why
| Data | Purpose |
|---|---|
| Account: the landlord's name and email; password (stored only as a bcrypt hash, never in plain text). | Create your account, sign you in, and keep it secure. |
| Tenants: name, phone number (for WhatsApp reminders), and cédula (national ID, optional). | Identify the lease's tenant and generate reminders and account statements. |
| Properties and leases: property address, cadastral and market values (optional), rent, dates, payment day, deposit. | Keep the rental records and calculate the legal rent increase (Law 820). |
| Payments: amount, date, method (bank transfer, Nequi, cash, etc.), payer's name, withholding tax, and notes. | Record who has paid and who has not. We do not store card or bank account numbers: the method is only a label. |
| Photos and documents: photos of payment receipts, and documents you upload to the file (cédula, lease contract, title deed, building rules, photos of the property's condition). | Support the payment and keep the lease file. Receipt photos are sent to a third party for automated reading (see §3). |
| Expenses and maintenance: amounts, dates, category, vendor. | Build the year-end report for your accountant. |
| Technical data: a session token and the minimal logs needed for the security of the service. | Keep your session and protect the account. |
We use no trackers, advertising, or third-party analytics. We do not sell or hand over your data for advertising purposes. We do not collect your location (see §4).
3. Receipt reading with artificial intelligence (Anthropic)
When you upload a photo of a payment receipt, the image is sent to Anthropic's API (Anthropic PBC, headquartered in the United States), which processes it with a vision model (Claude) to extract the amount, the date, the payer's name, and the payment method. It is the only transfer of data to a third party that ArriendoClaro makes, and it constitutes an international data transfer.
Anthropic acts as a processor and processes the image solely to return that extraction. We send it no other data: no tenant names, no phone numbers, no cédulas, and none of the rest of your portfolio. Under Anthropic's Commercial Terms, API request content is not used to train its models and is retained for the shortest time technically necessary to respond (or zero, depending on the retention agreement); Anthropic may retain, for up to two years, only content its policies flag for abuse. You can review Anthropic's privacy policy and its Commercial Terms.
The extraction is only a proposal that you review: nothing enters the accounting records without your explicit confirmation.
4. Photo metadata (EXIF/GPS)
Before storing any JPEG photo, ArriendoClaro removes its EXIF metadata, including GPS coordinates. The app does not ask for location permission and does not use your location.
A receipt photo is also sent to Anthropic for reading (see §3). If your camera added metadata, it travels with that image during the reading; the copy we store in our systems is stripped of metadata.
5. Data on your device (mobile app)
The ArriendoClaro mobile app stores on your device only:
- the session token, in the iOS Keychain or the Android Keystore — never your password;
- a local queue of payments waiting to sync when you log a payment offline; and
- a cached copy of your lease list, so the app works without signal.
Nothing else is stored on the device. We do not access your contacts, your location, or your photos, except the one you choose to take or upload as a receipt.
6. How long we keep the data
We keep the data while your account is active, because the system is a historical accounting record: payments are not deleted, they are voided (marked with the reason and date) to preserve the audit trail. When you delete your account, we erase your personal data and your tenants' data from our systems, except what we must keep under a legal obligation. Backups are rotated and overwritten in the normal backup cycle.
7. How to delete your data
You can delete your account and all your data at any time, from the app itself:
- On the web: go to Settings (
/ajustes) and use the delete-account option. - In the mobile app: open the Settings screen and tap Delete account.
Deleting the account permanently erases your properties, units, leases, tenants, payments, photos, and documents. You can also write to privacidad@arriendoclaro.com to request it.
8. Your rights (Law 1581 of 2012)
As the owner of personal data, Colombian law grants you the right to:
- Know, update, and rectify your data.
- Request proof of the authorization granted for its processing.
- Be informed about how it has been used.
- Revoke the authorization and/or request the deletion of your data.
- Access your personal data free of charge.
- File complaints with the Superintendencia de Industria y Comercio (SIC) for violations of the law.
To exercise these rights, write to privacidad@arriendoclaro.com.
If you are a tenant and your data was recorded by your landlord, the landlord is the data controller and ArriendoClaro acts as processor. Write to us and we will help you route your request to the responsible landlord.
9. Security
Access is encrypted in transit (HTTPS). Passwords are stored as bcrypt hashes, never in plain text. The mobile app authenticates with a revocable token kept in the Keychain/Keystore, not with your password. Files are private and can only be downloaded through short-lived signed links. JPEG photos have their EXIF metadata (GPS) removed before being stored.
10. Changes to this policy
We may update this policy to reflect changes in the service or in the law. The current version is always the one published on this page, with its last-updated date above. If a change is material, we will let you know inside the application.