PRIVACY POLICY — RENTORA
PATRICIA IW ROSSELL LLC
Contact: bagay810@gmail.com
────────────────────────────────────────────────────────────────────────
Our promise: We collect only what is necessary to run Rentora. We will
never sell, rent, or monetise your data. Your business information belongs
to you.
By registering a business account or using Rentora as an agent, you agree
to the practices described in this policy.
────────────────────────────────────────────────────────────────────────
SECTION 01 — OVERVIEW
────────────────────────────────────────────────────────────────────────
Rentora is a professional car rental management platform for small and
medium-sized rental businesses. This Privacy Policy explains what
information we collect, how we use it, and your rights regarding your data.
────────────────────────────────────────────────────────────────────────
SECTION 02 — INFORMATION WE COLLECT
────────────────────────────────────────────────────────────────────────
We only collect information you provide directly, or that is generated
naturally through using the app.
• Account Info — Name, email, hashed password, role
• Business Info — Company name, address, phone
• Fleet Data — Vehicle names, plates, photos, rates
• Bookings — Customer names, contacts, CNIC, dates
• Payment Data — Advances, balances, extra charges
• Usage Data — Anonymous crash & performance reports
We do NOT collect bank details, credit card numbers, GPS location,
biometrics, or advertising identifiers.
────────────────────────────────────────────────────────────────────────
SECTION 03 — HOW WE USE YOUR INFORMATION
────────────────────────────────────────────────────────────────────────
Every piece of data serves a specific operational purpose. We never use
your data for advertising or profiling.
Data Type Purpose Basis
─────────────────────────────────────────────────────────────────────
Account credentials Authentication & sessions Contract
Business info Company profile & isolation Contract
Fleet & booking data Core rental features Contract
Customer details Booking & payment tracking Legitimate interest
Vehicle photos Fleet display within your account Contract
Usage metrics Bug fixes & improvements Legitimate interest
────────────────────────────────────────────────────────────────────────
SECTION 04 — STORAGE & SECURITY
────────────────────────────────────────────────────────────────────────
We use enterprise-grade cloud infrastructure to protect your data at
every layer.
• Google Firebase — AES-256 encryption at rest, TLS 1.3 in transit for
all structured data.
• Cloudinary — Vehicle photos stored on Cloudinary's secure CDN with
access-controlled URLs.
• Passwords — Never stored in plain text. Firebase Auth handles secure
hashing and token management.
• Data isolation — Each company's data is logically isolated with a
unique ID. Security rules prevent cross-company access entirely.
• No sensitive local caching — Booking records and CNIC data are not
stored on your device.
Security Incident Response:
In the event of a breach affecting your account, we will notify you by
email within 72 hours of becoming aware of it.
────────────────────────────────────────────────────────────────────────
SECTION 05 — DATA SHARING & THIRD PARTIES
────────────────────────────────────────────────────────────────────────
We do not sell or share your data for advertising. The only third parties
that may process your data are infrastructure providers essential to
running Rentora.
• Google Firebase — database, authentication, cloud storage.
• Cloudinary — image hosting and delivery.
• Legal obligation — we may disclose data only if required by law or a
valid court order.
No analytics platforms, ad networks, or data brokers have access to your
Rentora data. Period.
────────────────────────────────────────────────────────────────────────
SECTION 06 — ROLE-BASED ACCESS CONTROL
────────────────────────────────────────────────────────────────────────
Access to data is scoped strictly by role and company affiliation. Users
can never access another company's data.
Feature Admin Agent
─────────────────────────────────────────────────────────────────────
View all bookings Full Company-wide
Create bookings Yes Yes
Delete bookings Yes No
Manage vehicles Full CRUD View only
Manage agents Yes No
See another company Never Never
Admins can disable an agent's access at any time. Disabled agents cannot
log in until re-enabled.
────────────────────────────────────────────────────────────────────────
SECTION 07 — DATA RETENTION
────────────────────────────────────────────────────────────────────────
We keep your data only as long as necessary to provide the service.
• Active accounts — Data retained for the lifetime of your business
account.
• Account deletion — All data permanently removed within 30 days of a
written deletion request.
• Agent removal — Firestore profile deleted immediately when removed by
an admin.
• Backups — Firebase automated backups may retain deleted data for up to
30 days before purging.
────────────────────────────────────────────────────────────────────────
SECTION 08 — YOUR RIGHTS
────────────────────────────────────────────────────────────────────────
You have the following rights over your personal data. Email us at
bagay810@gmail.com to exercise any of them — we'll respond within 30 days.
• Right to Access
• Right to Rectify
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
────────────────────────────────────────────────────────────────────────
SECTION 09 — COOKIES & LOCAL STORAGE
────────────────────────────────────────────────────────────────────────
Rentora is a native mobile app and does NOT use cookies. Only these
lightweight mechanisms are used for app functionality:
• SharedPreferences — stores only onboarding completion and permission
status. No personal data.
• Firebase Auth tokens — secure session tokens handled by Firebase SDK
in your device's secure storage.
• No advertising IDs — we do not access GAID, IDFA, or any device
advertising identifier.
────────────────────────────────────────────────────────────────────────
SECTION 10 — CHILDREN'S PRIVACY
────────────────────────────────────────────────────────────────────────
Rentora is intended exclusively for adults operating or working within a
vehicle rental business. We do not knowingly collect data from anyone
under 18.
If you believe a minor has created an account, contact us at
bagay810@gmail.com and we'll delete it promptly.
────────────────────────────────────────────────────────────────────────
SECTION 11 — CONTACT US
────────────────────────────────────────────────────────────────────────
Have a question, concern, or data request? We're happy to help.
Company PATRICIA IW ROSSELL LLC
Email bagay810@gmail.com
Response time Within 5 business days
────────────────────────────────────────────────────────────────────────
© 2024 Rentora. All rights reserved.
────────────────────────────────────────────────────────────────────────