Security

OffRentAudit is operated by Tigran Avakov, a self-employed individual, Mirzo-Ulugbek 45A, 100007 Tashkent, Uzbekistan.

Passwords are hashed, and sign-in attempts are limited. Your password is stored only as a salted PBKDF2-SHA256 hash, never in plain text. After 10 wrong attempts in 15 minutes, password sign-in pauses for 15 minutes; the one-time email link still works. Changing your password signs you out on every other device. A link expires after 15 minutes.

The session cookie is marked HttpOnly and Secure, is only sent to this site, and is renewed as you use the service.

Invoices are stored as files in object storage at Cloudflare, sealed with encryption, each file with a key of its own. A file is bound to your company: copied under another company, it cannot be opened. A file is here because you sent it; we do not fetch invoices from a rental company's portal.

Reading an invoice sends the text of its pages to Claude Haiku (claude-haiku-5-5), a language model of Anthropic. We use it under Anthropic's Commercial Terms of Service, which cover how it handles the data. Anthropic does not train its models on your files. Each value that comes back must be found in the text of the page, or it is not used. The privacy policy lists everyone who handles your data.

The pages load no analytics, no advertising and no fonts from other sites. The payment pages, /billing and /pay, load the checkout script of Paddle (cdn.paddle.com), open its payment frame (*.paddle.com), and send requests to *.paddle.com; no other page of this website loads a script from another site. A strict content policy refuses anything that is not ours except what the payment pages load, and the pages that change something refuse a request that comes from another site.

Card payments are handled by Paddle. Card details never reach us.

Everyone who is signed in to the company can take its data away. Your data comes as JSON and CSV, and the files you sent come as ZIP archives. Only the person who created the company can close the account. The person who created the company can also ask us by email to close the account: we check that the message comes from that person, and then erase the data in the same order as when you close the account yourself.

Closing cancels the subscription first, and only then erases the data: invoices, documents, answers, terms, off-rent records and credit requests, usually within an hour, at the latest within a day. If the subscription cannot be cancelled, nothing is erased and you are told to try again. Closing ends the subscription now. Cancelling the subscription in the Paddle customer portal, linked from the Billing page is different: it stops the next renewal and keeps your data and your access to the end of the period you paid for.

What we hold and who else handles it is set out in the privacy policy.