Privacy Policy

1. Information We Collect

When you use RentalOS ("the Service"), we collect information you provide directly:

• Account information: name, email address, phone number, and business details when you create an operator account.
• Customer data: names, email addresses, phone numbers, and delivery addresses that operators enter for their rental customers.
• Payment information: payment records and transaction details. Credit card processing is handled entirely by Stripe — we never store card numbers.
• Usage data: pages visited, features used, and actions taken within the dashboard.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send transactional emails (order confirmations, payment receipts, status updates)
• Respond to support requests and inquiries
• Enforce our Terms of Service and prevent abuse
• Send product updates and service announcements (with opt-out)

3. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Supabase — for database hosting and authentication
• Resend — for transactional email delivery
• Vercel — for application hosting

Each provider processes data under their own privacy policies and in compliance with applicable regulations.

4. Data Security

We implement industry-standard security measures including encrypted connections (TLS), row-level security policies on all database tables, rate limiting on authentication endpoints, and secure session management.

5. Data Retention

We retain account and business data for as long as your account is active. Customer records entered by operators are retained per the operator's use of the platform. You may request deletion of your account and associated data at any time by contacting us.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data (CSV export available in-app)
• Opt out of non-essential communications

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

8. Children's Privacy

The Service is intended for business operators aged 18 and older. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or in-app notification. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or data requests, contact us at privacy@rentalos.com.