Privacy Policy

Operator accounts. Names, email addresses, and roles for the people an operator invites to use RTOCore.

Business records. The contracts, customers, payments, invoices, and related records an operator enters into RTOCore or imports from their previous software. This data belongs to the operator; RTOCore stores and processes it solely to provide the service.

QuickBooks data. If an operator chooses to connect their QuickBooks Online company, RTOCore uses Intuit’s official API to read financial reports (such as the Profit & Loss) so they can be included in the operator’s own reporting. RTOCore never sees the QuickBooks password — the connection is authorized on Intuit’s own consent screen. Access is read-oriented, limited to the connected company, and the operator can disconnect at any time from inside RTOCore, which deactivates the stored connection and asks Intuit to revoke it.

RTOCore is software that rent-to-own companies use to run their businesses. Companies that use RTOCore can send their customers text messages about their rental-purchase agreements. Each text comes from the company that holds the customer’s agreement and is sent through the RTOCore platform.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging consent and opt-in information will not be shared with any third parties, other than the messaging service providers that carry the messages for us, and only to deliver them.

Reply STOP to any message to stop receiving texts. You will get one message confirming the opt-out and no further texts unless you reply START to opt back in. Reply HELP for help, email support@rtocore.com, or contact the company that holds your agreement. Message frequency varies by account. Message and data rates may apply. Details on the Text messaging page.

We do not sell data. We do not share operator or customer data with third parties for advertising or marketing. We do not use QuickBooks data for anything other than displaying it to the operator who connected it.

RTOCore runs on established infrastructure providers that process data on our behalf: application and database hosting (Railway, Supabase), transactional email (Postmark), text messaging for operators who enable it (Telnyx), payment processing for operators who enable it (Finix), and the QuickBooks connection described above (Intuit). Each provider receives only what it needs to perform its function, over encrypted connections.

All traffic to and from RTOCore is encrypted in transit (HTTPS), and data is encrypted at rest by our hosting providers. Access to business records is scoped per company and per user role. Credentials for connected services, such as QuickBooks tokens, are stored server-side only and are never exposed to browsers.

Business records are retained for as long as the operator uses the service, since rent-to-own contracts and payment histories are long-lived financial records. An operator may request export or deletion of their company’s data by contacting us.

If this policy changes materially, the effective date above will be updated. Questions or requests: support@rtocore.com.