Effective date: September 21, 2026
Operated by RIOT MOTION LLC. This document is provided in English; the English version governs.
This Privacy Policy explains how RIOT MOTION LLC ("RIOT MOTION," "we," "us") collects, uses, shares, and protects information when you use the Rent History Analyzer, RentHistory.org, our REC-1 full-service records request, and related services (the "Service"). RIOT MOTION LLC is the controller of the personal information described here. This Policy is part of, and should be read together with, our Terms of Service and Disclaimer.
Documents and their contents ("Submitted Materials"). DHCR rent histories and registration records, rent rolls, leases and renewals, eviction petitions and court papers, correspondence, and any other rent-related documents, images, scans, or text you provide in any format. These documents commonly contain the property address and apartment number, registered and actual rent figures, lease dates, registration and status codes, the names of the owner or managing agent, and the names of current and prior tenants.
Contact and identity information. Your email address (required to receive an access code); and, if you use the REC-1 full-service option, your full name, phone number, mailing address, approximate tenancy start, names on the lease, a government-issued photo ID, a current lease or utility bill as proof of tenancy, your handwritten signature, and any notes you provide.
Payment information. Payments are processed by a third-party processor. We receive confirmation of payment, the amount, and a transaction identifier; we do not store your full card number.
Communications. Emails, WhatsApp or other messages you send us, feedback and ratings you submit, and, for full-service cases, all correspondence with DHCR routed through your case-specific email address, including attachments.
Technical and usage information. IP address, approximate location derived from it, device and operating system, browser type and language, "Do Not Track" setting, referring page, pages viewed, options toggled, timestamps, and error logs, collected automatically through server logs and analytics tools (including Google Analytics).
Tenant-rights organizations. We regularly share Submitted Materials and the data within them with tenant-rights, housing-justice, legal-services, and advocacy organizations operating in New York City. Because these organizations may need unit-level detail to assist tenants in a building, this sharing is not necessarily redacted. We ask recipient organizations to use the data for tenant assistance, organizing, research, and policy purposes.
Public educational publication (redacted). We periodically publish data from Submitted Materials so that tenants, advocates, researchers, journalists, and the public can better understand the patterns of rent regulation and rent deregulation in New York City. Before any public publication we remove your name, email, phone number, and signature; the names of all current and former tenants; and the specific street address and apartment number. Rent figures, registration codes, dates, owner or agent names, and building- or neighborhood-level information may appear.
Service providers. Hosting and database providers, AI and OCR model providers, email and messaging delivery services, payment processors, analytics providers, and push-notification services, each of which processes information only as needed to provide services to us.
DHCR. For the full-service option, on your written authorization, we send your name, address, apartment, ID, proof of tenancy, and signature to the New York State Division of Housing and Community Renewal as part of your records request.
Legal and safety. When we believe disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of RIOT MOTION, our users, or others.
Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, information may be transferred to the successor, who will remain bound by this Policy.
We do not sell your contact information to advertisers or data brokers.
By submitting a rent history, rent roll, or any other rent-related document, image, or text in any format, you grant RIOT MOTION LLC a perpetual, worldwide, royalty-free, transferable, and sublicensable license to store, copy, analyze, extract, aggregate, create derivative works from, distribute, disclose, publish, and otherwise use those materials and the data within them, for any purpose, subject to the redaction standard in Section 4 for public publication. The full terms of this grant, your representations, and its limits are set out in Sections 5 through 7 of our Terms of Service.
You may at any time ask us to retroactively forfeit your Submitted Materials by emailing forfeit@renthistory.org from the email you used with the Service, identifying the document(s) or analysis ID(s). Once verified, we will delete the originals and your contact details from our active systems, stop any further sharing or inclusion in future publications, and notify recipient organizations where practicable, ordinarily within 30 days. We cannot retrieve copies already shared or published, or un-aggregate statistics already derived, and we may retain limited copies in backups and as required by law or to resolve disputes.
We keep Submitted Materials, analysis results, and case records for as long as needed to provide the Service and for the purposes in Sections 3 and 4, which may be indefinitely unless you request forfeiture. Identity documents and signatures collected for the full-service option are retained for the life of the case plus a reasonable period to resolve disputes, then deleted. Technical logs are typically retained for up to 24 months. Payment records are kept as required by tax and accounting law.
Documents are encrypted in transit and at rest, results are protected by one-time email access codes, identity documents are stored in private (non-public) storage, and administrative access is restricted to authorized personnel. No system is perfectly secure; you use the Service at your own risk and should notify us promptly through our Contact page if you suspect unauthorized access.
We use essential cookies and browser storage to keep the Service working and to remember your language preference, and Google Analytics to understand how the Service is used. Google Analytics may set its own cookies and receive your IP address and usage data; you can opt out with Google's browser add-on or by blocking third-party cookies. We record the "Do Not Track" signal your browser sends but, like most services, do not currently change our behavior in response to it.
Your documents are read and analyzed by automated systems, including large-language and vision models operated by third-party providers under contract with us. These systems can make mistakes. No output is a legal determination, and no decision with legal effect is made about you solely by automated means — you always decide what to do with the results. See our Disclaimer.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights, or ask questions about them, by emailing forfeit@renthistory.org or through our Contact page. We will verify your identity before acting and respond within the time required by applicable law. We will not discriminate against you for exercising your rights. You may opt out of non-essential emails by replying to any message.
The Service is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
The Service is operated from the United States and is directed to New York City tenants. If you access it from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.
We may update this Policy from time to time. We will post the revised version with a new effective date and, for material changes, note the change on this page or notify you by email. Your continued use after the effective date means you accept the revised Policy.
RIOT MOTION LLC, New York, NY. General inquiries: Contact page. Data forfeiture and privacy requests: forfeit@renthistory.org.
Questions about these documents: use our Contact page.
To withdraw the rights you granted over documents you submitted: forfeit@renthistory.org.