RentCloudRentCloudRentCloud
PlatformCloud AIPricing
Sign inStart free trial
Skip to content
RentCloudRentCloudRentCloud
PlatformCloud AIPricing
Sign inStart free trial

LEGAL, PRIVACY

Privacy Notice

Last updated: 30 May 2026, Version 1.1

ON THIS PAGE

About this notice1. Who we are2. Roles, controller vs. processor3. Categories of personal data4. Lawful basis (GDPR Article 6)5. Retention6. Recipients and sub-processors7. Your rights8. Cookies and advertising measurement9. Security10. Changes to this notice

About this notice

RentCloud provides cloud-based operational software for car-rental companies. This policy explains what personal data we collect, why, and your rights under the GDPR and applicable laws in the markets we serve.

1. Who we are

This Privacy Notice is issued by RentCloud ("RentCloud", "we", "us"), the controller of personal data processed via the RentCloud platform (the dashboard at app.rentcloud.ai, the partner portal, and the customer-facing kiosk and signing surfaces).

You can contact our data team at privacy@rentcloud.ai for any question about how your data is handled, or to exercise the rights described in section 7.

2. Roles, controller vs. processor

When you book a vehicle through a partner using RentCloud, the rental partner is the controller of your booking, contract, payment, and identification data. RentCloud acts as a processor on their instructions, under a data processing agreement aligned with Article 28 GDPR.

When you sign up as a RentCloud user (partner staff, super-admin, ops user), RentCloud is the controller of your account, sign-in, and audit-log data.

3. Categories of personal data

  • Account data, name, email, hashed password, role, language preference, two-factor configuration, audit timestamps.
  • Booking & contract data, names, addresses, booking references, vehicle and pricing details, contract PDFs.
  • Identification data, driver's license number, ID document number, expiry dates, scan images. Stored encrypted at rest; access logged.
  • Payment data, Stripe customer + payment-method references. RentCloud never sees or stores raw card numbers; they remain inside Stripe's PCI-DSS Level 1 environment.
  • Vehicle handover data, handover/return photos, signatures (drawn or remote-link), odometer + fuel readings, damage notes.
  • Technical data, IP address, user-agent, session token hash, audit-log entries describing actions you took inside the dashboard.

4. Lawful basis (GDPR Article 6)

  • Contract performance (Art. 6(1)(b)), for the rental contract you sign with a partner and the platform subscription contract partners hold with RentCloud.
RentCloud

PRODUCT

  • Fleet management
  • Bookings
  • Digital contracts
  • Cloud AI
  • Damage vision
  • Pricing

COMPANY

  • About
  • Our platform
  • Contact

RESOURCES

  • Blog
  • Book a demo
  • Sign in
  • Plans

LEGAL

  • Privacy
  • Terms
  • Cookie settings
Ready to start?Start free trialTalk to sales

RentCloud is a software platform operated by ONE DRIVE PORTAL L.L.C, registered in the United Arab Emirates. RentCloud is designed for car rental businesses and provides operational tools including fleet management, bookings, digital contracts, e-signing, damage documentation, settlement workflows and automation. RentCloud is not a bank, payment institution, insurance provider or car rental operator. Any payment, verification, government, insurance or third-party services made available through the platform are provided by the relevant external providers and may be subject to their own terms, approvals and regulatory requirements.

© 2026 RentCloud. All rights reserved.
RentCloud
PlatformCloud AIPricingSign inStart free trial
We value your privacy. We use cookies to run the site, measure traffic and improve our ads. You can accept all, or only what's essential. See our Privacy Policy.
  • Legal obligation (Art. 6(1)(c)), invoice retention (10 years), accident reporting, KYC on payment instruments.
  • Legitimate interest (Art. 6(1)(f)), fraud detection, deposit-free rental risk scoring, security monitoring, and aggregate product analytics. Balanced against the "reasonable expectations of the renter" test.
  • Consent (Art. 6(1)(a)), marketing email and optional AI-assist features. You can withdraw consent at any time from Settings → Notifications.
  • 5. Retention

    • Contracts & invoices, 10 years after rental completion.
    • ID and licence scans, 5 years after rental completion or until you exercise your erasure right, whichever comes first.
    • Audit logs, 2 years rolling.
    • Closed user accounts, anonymised (PII fields cleared) within 30 days of closure, then retained in anonymous form for product analytics.

    6. Recipients and sub-processors

    We share the data above with the following categories of recipients:

    • Sub-processors, AWS (eu-central-1 hosting), Resend (transactional email), Stripe (payments), Supabase (file storage), Vercel (frontend delivery), Anthropic + Google AI (Cloud / advisory features, anonymised prompts only).
    • Google (Google Ireland Ltd and Google LLC), advertising measurement on rentcloud.ai and the sign-up, as described in section 8.
    • Rental partner staff, for bookings you make with them, restricted to the bookings on their tenant.
    • Authorities, when ordered by a UAE or EU judicial authority.

    A current sub-processor list is available on request. None of the recipients above are based outside the EEA, with the exception of Anthropic, Stripe and Google (US), those transfers happen under Standard Contractual Clauses or the EU-US Data Privacy Framework.

    7. Your rights

    Under GDPR Articles 15–22 you can request:

    • access to your personal data,
    • rectification of inaccurate data,
    • erasure (subject to retention obligations above),
    • restriction or objection to processing based on legitimate interest,
    • portability of the data you provided to us,
    • to lodge a complaint with the supervisory authority in your country of residence.

    Email privacy@rentcloud.ai to exercise any of these. We answer within 30 days.

    8. Cookies and advertising measurement

    rentcloud.ai and the sign-up at app.rentcloud.ai use a small number of cookies. Essential cookies keep the site, the sign-up and your session working and are always on.

    Advertising and analytics cookies come from Google Ads, which we use with Google Consent Mode to learn which of our ads led to a demo request or a free trial, so we stop paying for ads that do not work. When these cookies are allowed and you send the demo form or finish the sign-up, your email address is passed to Google in hashed form (SHA-256) to match the request to the ad you clicked.

    • In the EEA, the United Kingdom and Switzerland these cookies stay off until you choose Accept all.
    • Elsewhere they are on by default, and you can switch them off with Essential only.
    • While they are off, Google stores nothing on your device and receives no email address; the tags only send cookieless signals, and the identifier of the ad you clicked can travel in the page address from our site to the sign-up.

    Your choice is kept in a cookie named rc_consent on rentcloud.ai and its subdomains for 12 months, so it also applies to the sign-up. You can change it at any time with Cookie settings at the bottom of every page of rentcloud.ai.

    Where the GDPR applies, we rely on your consent (Art. 6(1)(a)) for advertising and analytics cookies, and you can withdraw it as easily as you gave it.

    9. Security

    Data is encrypted in transit (TLS 1.2+) and at rest (AES-256 on S3 + RDS). Passwords are hashed with bcrypt (cost 10). Access to production data is restricted to a small set of named operators via SSO + MFA + an SSM-only bastion. Every action against the dashboard is recorded in the audit log.

    10. Changes to this notice

    Material changes are announced by email at least 14 days before they take effect, and the new version is published here with an updated date at the top. Continued use after the effective date constitutes acceptance.

    © 2026 RentCloud, RentCloud.Terms of Service, privacy@rentcloud.ai