Privacy policy
Version 1.0 draft, 2 September 2026. Prepared for legal review.
Who this covers
Clients and their agents, delivery recipients, drivers, and visitors to rentadriver.ai. Controller: Efirity, trading as RentADriver. Contact: privacy@rentadriver.ai.
What we collect and why
| Data | Who | Purpose | Retention |
|---|---|---|---|
| Name, email, company, API usage | Clients | Account, billing, abuse prevention | Life of account + 7 years for financial records |
| Pickup and drop-off addresses, contact names and phones, instructions | Recipients (provided by clients) | Performing the delivery; shared with the assigned driver only while active | Delivery record kept 3 years; phones masked after 30 days |
| Proof photos, signatures, recipient names, handoff coordinates | Recipients, drivers | Proof of delivery, disputes | 90 days (photos), 3 years (structured record) |
| Identity documents, licence, selfie, vehicle | Drivers | Verification, safety, legal compliance | Duration of engagement + statutory period; visible to verification staff only |
| Live location while on shift | Drivers | Dispatch, tracking for the active delivery, safety | 30 days history; live position shared publicly only rounded and anonymous |
| Earnings, payouts, bank details | Drivers | Payment | 7 years |
| Wallet and payment references | Clients | Payment; cards handled by Stripe, we never store card numbers | 7 years |
| Site analytics (aggregate, cookieless where possible) | Visitors | Improving the site | 13 months |
Legal bases
Contract (performing deliveries and paying drivers), legitimate interests (safety, fraud prevention, service improvement), legal obligation (financial records, verification) and consent (marketing to drivers, optional cookies).
Sharing
Assigned drivers see the details needed for the job. Processors: Supabase (database and storage), Stripe (payments), Resend (email), Twilio (SMS), Apple and Google (push), OpenStreetMap-based geocoding and routing providers (addresses only). We do not sell personal data.
International transfers
Data is stored in the EU and processed in the countries where deliveries occur; transfers rely on standard contractual clauses where required.
Your rights
Access, correction, deletion, portability, objection and restriction, and the right to complain to your supervisory authority. Recipients can ask a client to delete a delivery record or write to us directly. Drivers can export their data from the app.
Cookies
See the Cookie Policy. The console stores your API key in your browser only if you choose to sign in there.
Changes
We will post changes here and notify account holders of material changes by email.