Privacy Policy

1. Who we are#

RentPilot operates an online marketplace that connects renters with verified rental companies offering self-drive cars. We are an intermediary: the rental itself is a contract between you and the rental company, which owns the vehicle and sets its price and conditions.

This policy explains what personal data we handle when you use RentPilot, why we handle it, and who we share it with.

2. What we collect#

• Account details — your name, email address, phone number and language preference.
• Sign-in data — a hashed password, or your Google sign-in identifier if you choose to sign in with Google, together with session, device and sign-in-link records.
• Booking details — the car, your pickup and return dates and locations, any note you send to the rental company, and a copy of your name, email and phone number recorded on that booking.
• Files uploaded by rental companies — company registration and vehicle documents, and photographs of their vehicles.
• Technical data — error reports and basic device information, from which personal details are removed before they reach our monitoring provider.

3. What we do not collect#

If any of this changes, we will update this policy before the change takes effect.

4. Why we use it#

• To create and secure your account, and to sign you in.
• To pass a booking request to the rental company and let it confirm, decline or cancel that request.
• To send you transactional messages about your account and your bookings.
• To keep the marketplace safe and working — including diagnosing faults and preventing abuse.
• To meet our legal and accounting obligations.

5. Who we share it with#

• The rental company you book with — your name, contact details and the details of that booking.
• Resend — to deliver transactional email on our behalf.
• Google — to sign you in if you choose Google sign-in, and to look up addresses when you search.
• Sentry — to report software errors; personal details are stripped from those reports before they are sent.
• Our hosting and file-storage providers, and public authorities where the law requires it.

We do not sell your personal data.

6. How long we keep it#

We keep your account data for as long as your account exists. Booking records are kept for as long as we need them to run the service and to meet accounting and legal retention duties, after which they are deleted or anonymised. Documents uploaded by rental companies are kept while the company is listed with us.

7. Your rights#

Subject to applicable law, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it elsewhere. Some of these rights are limited where we have an overriding obligation — for example an active booking or a legal retention duty. Write to us and we will respond.

8. Keeping data safe#

Passwords are hashed, traffic is encrypted in transit, and each rental company's data is isolated from every other company's at the database level. Files uploaded by rental companies are stored privately and are reachable only through short-lived, signed links.

9. Contact and languages#

This policy is published in English, Azerbaijani and Russian. The Azerbaijani and Russian versions are provided for convenience; if they differ, the English version governs. This is a working version and is being finalised with Azerbaijani legal counsel.