Privacy Policy

DrinuAI is an AI-assisted rental information service operated by Tenant Check Malta. It provides general information concerning residential renting in Malta, including rental registration, deposits, contracts, landlord responsibilities, tenant rights, property maintenance, disputes, and related topics.

For the purposes of applicable data-protection law, the data controller is:

You should not enter unnecessary personal information about yourself or another person into DrinuAI.

In particular, do not submit identification-card numbers, passport numbers, bank details, health information, criminal allegations, confidential legal documents, passwords, or other sensitive information unless a specific DrinuAI feature clearly requires it and explains how it will be handled.

Questions should be written in a general and anonymised way whenever possible.

Depending on the circumstances, we may process personal information on one or more of the following legal bases:

• Contract: where processing is necessary to provide a service or account requested by you.
• Legitimate interests: including operating, improving, protecting, and securing DrinuAI.
• Consent: where consent is required, including for certain cookies or optional communications.
• Legal obligation: where processing is required to comply with applicable law.
• Legal claims: where information is necessary to establish, exercise, or defend a claim.

Questions submitted to DrinuAI are processed so that the platform can search its knowledge base and return relevant guidance.

Depending on the technical configuration in use, questions may also be processed by an external artificial-intelligence, hosting, analytics, or search provider acting on our behalf.

We may retain queries for security, troubleshooting, service improvement, content-gap analysis, and quality monitoring. Where practical, we aim to use aggregated, pseudonymised, or anonymised data for improvement purposes.

DrinuAI is not intended to make legally binding decisions about users and should not be used for automated decisions that produce legal or similarly significant effects.

DrinuAI may use cookies, local storage, and similar technologies for authentication, security, user preferences, performance monitoring, and analytics.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential cookies will be used only where an appropriate legal basis exists.

You can manage cookies through your browser and, where available, through our cookie settings. Blocking certain cookies may prevent some platform features from working correctly.

We may share personal information with trusted providers that help us operate DrinuAI, such as:

• Cloud-hosting and database providers.
• AI, search, or language-processing providers.
• Email and communications providers.
• Security, monitoring, and fraud-prevention providers.
• Analytics and performance providers.
• Professional advisers, including lawyers and accountants.

These providers may process information only for the services they provide to us and subject to appropriate contractual and security obligations.

We may also disclose information where required by law, court order, regulatory request, or where reasonably necessary to protect users, the public, or our legal rights.

We do not sell personal information.

Some service providers may process information outside Malta or outside the European Economic Area.

Where required, we use an approved transfer mechanism and appropriate safeguards, such as an adequacy decision, standard contractual clauses, or another mechanism recognised under applicable data-protection law.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing the service, maintaining security, resolving disputes, complying with legal obligations, and establishing or defending legal claims.

Retention periods may differ according to the type of information. Account data may be retained while an account remains active, while security and diagnostic logs may be retained for a shorter operational period unless required for an investigation.

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, accidental loss, misuse, alteration, or disclosure.

Measures may include access controls, encrypted communications, password hashing, monitoring, backups, and restricted administrative access.

No website, network, or storage system can guarantee complete security.

Subject to applicable conditions and exceptions, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request portability of information you provided.
• Withdraw consent where processing is based on consent.
• Object to direct marketing.
• Request information about certain automated decision-making, where applicable.

To exercise a right, contact adrian@tenantcheck.mt . We may need to verify your identity before completing a request.

You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta.

DrinuAI is intended for adults dealing with residential rental matters. It is not designed for children, and we do not knowingly seek to collect personal information from children.

Contact us if you believe that a child has submitted personal information through DrinuAI without appropriate authorisation.