Privacy Policy

Who we are

Rent Your Car (the website and the iOS and Android apps) is run by SOL TECH GROUP, INC. in the United States. This policy explains what personal information we handle and why. It applies to people in the United States; Rent Your Car is a US-only service.

What we collect

When you search (no account needed)

• Search details: the place you search (or your device location if you tap “use my location”), dates, driver age, radius and filters. These are used to run the search; on the website they also appear in the page address so you can share a search.
• Status and codes you add for one search: on the website they stay in that browser tab only (session storage) and are never put in the page address; in the app they stay in your phone’s secure keychain.
• Book clicks: when you click Book we record the company, partner, platform (web, iOS or Android), the link and the search details, so we can measure what’s useful and reconcile partner commissions. Discount codes are removed from the link before it’s stored, and member numbers are never part of it.
• Technical data: your IP address is used briefly to limit how many requests one device can make (rate limiting) and appears in standard server logs at our hosting provider.

If you create an account

• Sign-in: your e-mail address, or the details Apple or Google share when you use “Sign in with Apple/Google” (we use Supabase for authentication).
• Profile: name (optional), driver age, home location (if you set one; the app rounds it to about 1 km), default radius, programs you belong to (like AAA or USAA), notification settings and your privacy choices.
• Wallet: loyalty member numbers, statuses and discount codes. They’re encrypted at rest with AES-256-GCM, only the last 4 characters are ever shown, they’re never logged, and they’re never sent to price partners. On your phone they’re kept only in the operating system’s secure storage (Keychain / Keystore).
• Saved searches and price alerts: the search details (never codes), your target price and how you want to be notified.
• Push tokens: if you allow notifications in the app, a push token for your device so we can send price alerts.

Only with your consent

• Analytics: if you accept analytics cookies, PostHog records which pages are visited (without the search details in the address) and basic device information. No session recordings, no keystrokes.

How we use it

• to run searches, show who rents at your age and build Book links with your dates, age, status and codes;
• to keep your account, wallet, saved searches and alerts, and to send the price alerts you ask for;
• to keep the service secure, prevent abuse and fix errors;
• to understand which features help people (with your consent for analytics), and to reconcile partner commissions;
• to send occasional product news only if you opt in (you can opt out any time).

What we never do

• We never sell your personal information.
• We never ask for, store or handle payment card numbers. Bookings and payments happen on the partner’s or company’s site.
• We never send your member numbers or codes to price partners.
• We never scrape rental company or aggregator websites.

Who we share it with

We use service providers that process data for us under contract, only to run Rent Your Car:

Partners and rental companies: when you click Book, you go to the partner’s site (Discover Cars, EconomyBookings, Booking.com, KAYAK or Priceline) or to the rental company’s own site. The link carries only what’s needed for that booking page — such as the location, dates and age, and on a company’s own site your discount code if you added one. What happens there is covered by their privacy policies.

We may also disclose information when the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business (with notice to you).

Your choices and rights

• Export: download everything we hold about you from Account & privacy on the website or Profile in the app.
• Delete: delete your account (and all of its data) from the same places. Deletion is immediate and permanent.
• Correct: edit your profile, wallet, saved searches and alerts at any time.
• Do not sell or share: use Do not sell or share my personal information. We also honor the Global Privacy Control (GPC) signal from your browser.
• Notifications and e-mail: turn alerts and news on or off in your settings; every alert e-mail has a one-click unsubscribe link.
• Analytics: change your choice in Cookie settings.

You can also e-mail us at privacy@rentyourcar.co. We won’t treat you differently for using any of these rights.

California (CCPA/CPRA)

If you live in California you have the right to know what personal information we collect and how we use it, to access, correct and delete it, to opt out of its “sale” or “sharing” for cross-context behavioral advertising, and to limit the use of sensitive personal information. We don’t sell personal information and don’t use it for cross-context behavioral advertising; you can still record your choice on the Do not sell or share page, and we honor GPC. We don’t use sensitive personal information to infer characteristics about you. Categories we collect: identifiers (e-mail, device and push tokens, IP address), customer records (profile, wallet — encrypted), internet activity (searches and Book clicks; analytics only with consent) and approximate geolocation (if you share it).

How long we keep it

• Account, profile, wallet, saved searches and alerts: until you delete them or your account.
• Book clicks: while needed for reporting and partner reconciliation, then deleted or anonymized.
• Partner prices: only as long as each partner allows, then deleted automatically.
• Cached place lookups: up to 30 days. Rate-limit counters: about a minute.

Security

Traffic is encrypted in transit (HTTPS). Wallet numbers and codes are encrypted at rest with AES-256-GCM, and every account query runs with database row-level security so one person can never read another’s data. No system is perfectly secure; if a breach affects you, we’ll tell you as the law requires.

Children

Rent Your Car isn’t directed to children under 13, and you must be 18 or older to create an account. If you believe a child has given us personal information, contact us and we’ll delete it.

Cookies

We use only the cookies and browser storage we need, plus optional analytics cookies if — and only after — you accept them.

Changes and contact

If we change this policy in a meaningful way, we’ll tell you on the site or by e-mail before it takes effect. Questions or requests: privacy@rentyourcar.co · SOL TECH GROUP, INC.