Who we are
Rentalex is a platform for companies that rent out transport: a CRM, a customer cabinet, rental storefronts and a rental point app. In this policy, “we” means the owner of the Rentalex platform, and a “rental” means a company that uses the platform.
Two roles
Data about a rental’s customers — bookings, customer records, documents, deposits and payments — is entered and determined by the rental itself. For this data we are a processor: we store and process it on the rental’s behalf and only for its records. The rental is responsible for what it collects about its customers and why; please ask the rental about such data first.
We determine accounts, sign-in, a rental’s subscription and enquiries from our websites ourselves, and we are directly responsible for that data.
What data we receive
- Account: name, email, phone number, profile photo and a password hash — we never store the password itself.
- Sign-in methods: for Google or Apple sign-in — your account identifier at the provider, email and name; for a passkey — only its public part; the authenticator app secret — encrypted.
- Sessions and security: sign-in time, IP address, browser or device details, and the activity log in the rental’s cabinet.
- Rental records: bookings, fleet, customers and their documents, deposits, payments, contracts and tasks — whatever rental staff and customers enter.
- Rental point app: the device token for notifications, and photos and signatures taken at handover and return.
- Enquiries: questions sent through the website form and the contact details you left in them.
Why we need it
We do not sell data, show ads or build advertising profiles.
- to let you sign in and work;
- to keep the rental’s records;
- to send emails and notifications about bookings, payments and account security;
- to accept payments;
- to protect the platform from break-ins and abuse;
- to answer enquiries.
Sign-in with Google and Apple
When you sign in with Google or Apple, the provider gives us your account identifier, email and name — nothing else: we have no access to your mail, contacts or files. We use this data only to sign you in and to link accounts.
If you hid your email with Apple, we write to the address Apple provided. You can unlink Google or Apple and set a password in your profile.
Rentalex’s use of information received from Google adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share data with
Only with services the platform cannot work without, and only as much as their job requires:
- Google and Apple — sign-in, if you chose it;
- Resend — sending email;
- Apple Push Notification service — notifications in the rental point app;
- Telegram — notifications, if they are turned on;
- Xendit — accepting online payments;
- Google Maps Platform — address suggestions: the address being typed is sent there;
- a language model provider — translating names in a rental’s catalogues; customers’ personal data is not sent there.
Data may also be disclosed where the law requires it.
Where and how long data is kept
Data is stored on a server rented by the platform and in its backups. We keep data while the account or the rental’s records are active; after they are closed we delete or anonymise the data unless the law requires us to keep it longer.
A started Google or Apple sign-in lasts 10 minutes; a cabinet session lasts no longer than 90 days from sign-in.
How we protect data
Connections are encrypted. Passwords are stored as hashes and second-factor secrets are encrypted. Each rental’s data is separated from other rentals’ at the database level. Links to documents and photos are temporary. Platform staff access a rental’s data only for support.
Cookies and browser storage
We use only necessary cookies: the cabinet session, protection of a started Google or Apple sign-in, and the chosen site theme. Your language and small preferences are kept in the browser. There are no analytics or advertising cookies.
Your rights
You can find out what data we hold about you, correct it, get a copy, ask us to delete it or restrict its processing, and withdraw consent to Google or Apple sign-in. Change your name, email and sign-in methods in your profile; for anything else, contact us: info@rentalex.io.
If the data was entered by a rental, we will pass your request on to it and help carry it out.
Children
The platform is not intended for children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy. We will announce significant changes in the cabinet or by email; the date of the current version is shown at the top of the page.
Contact
Questions about data: info@rentalex.io.