Privacy Policy

This Privacy Policy describes how Renta Labs LLC (“Renta,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information through our platform at getrenta.io and all associated tenant storefronts, services, and APIs (collectively, the “Platform”).

Where we operate: The Platform runs on getrenta.io and Renta-hosted tenant storefront URLs. Separately, Renta Labs LLC publishes corporate information about the company at rentalabs.io.

This Privacy Policy applies to all users of the Platform, including rental business operators (“Tenants”), consumers who book rentals (“Renters”), and visitors to our website (“Visitors”).

1. Who We Are

Renta Labs LLC is a Utah limited liability company that operates the Renta platform, a multi-tenant SaaS platform connecting independent rental businesses with consumers seeking to rent outdoor recreation and other equipment.

Contact Information:
Address: 1752 W Plains Dr
Apple Valley, UT 84737
Contact: team@rentalabs.io
Platform: getrenta.io
Renta Labs (company): rentalabs.io

Our Role in Data Processing:

• For Tenant business data (your account, billing, usage): Renta is the data controller.
• For Renter personal data (customer information collected through tenant storefronts): Renta is a data processor acting on behalf of the Tenant, who is the data controller.

2. Categories of Personal Information We Collect

2.1 From Tenants (Rental Business Operators)

2.2 From Renters (End Consumers)

2.3 From Website Visitors

3. Sources of Personal Information

• Directly from you — account creation, booking forms, digital waivers, contact forms
• Automatically through technology — cookies, server logs, similar technologies (see our Cookie Policy)
• From Stripe — payment verification data, identity verification results
• From Supabase — authentication and session data
• From Tenant operators — when a Tenant manually enters customer information

4. How We Use Your Personal Information

5. How We Share Your Personal Information

5.1 With Tenant Operators

When a Renter makes a booking, their personal information is shared with the specific Tenant operating the rental business they booked with. The Tenant is the data controller for this data.

5.2 With Service Providers (Sub-processors)

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5.3 With Law Enforcement

We may disclose personal information when required by valid legal process, including subpoenas, court orders, or government requests.

5.4 In Business Transfers

If Renta is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction.

5.5 Google OAuth Integration

Which Google data we access: When a Tenant (rental business operator) connects their Google account to Renta, we access:

• Google Search Console data — read-only access to search performance metrics and index coverage via the webmasters.readonly scope
• Google Analytics 4 data — read-only access to website traffic reports and analytics via the analytics.readonly scope
• Google account email — your email address associated with the connected account, displayed in Renta as “Connected as [your email]”

How it's used: This data is accessed only to display your website's traffic and search performance inside the Renta dashboard, so you can view your own analytics without leaving Renta. We do not sell this data, use it for advertising purposes, use it to train AI or machine learning models, or share it with third parties except as necessary to provide this feature or as required by law.

Token storage and protection: OAuth tokens are encrypted and stored on our servers. You can disconnect your Google account at any time in your Renta settings, which immediately stops Renta from accessing Google data and deletes the stored token. You can also revoke Renta's access directly at myaccount.google.com/permissions.

Google API compliance: Renta's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell your personal information. See Section 13.

6. Public Marketplace Profiles

Renta operates a marketplace where Tenants and Renters transact with one another. To foster trust and safety in this marketplace, Renta creates a public profile page for every user who creates an account on the Platform. Your public profile is accessible at a URL in the format /users/{your-slug}/profile.

6.1 Information Displayed on Your Public Profile

The following personal information is displayed publicly on your profile and is visible to anyone who visits your profile page, including other Platform users and the general public:

6.2 Information Never Displayed on Your Public Profile

The following personal information is never displayed on your public profile and is not accessible to other users or the general public through your profile page:

• Email address
• Phone number
• Payment information (card details, bank information)
• Booking details (specific shops, dates, amounts, equipment rented)
• Driver's license information (number, state, scans)
• Physical or mailing address

6.3 Public Profiles as a Core Marketplace Feature

Public profiles are an integral part of Renta's marketplace trust and safety infrastructure. They enable Tenants and Renters to evaluate the reputation and legitimacy of the parties they transact with before committing to a rental. Because of this essential marketplace function:

• Your public profile is created automatically when you create an account on the Platform.
• Public profiles cannot be hidden, made private, or opted out of. This is consistent with industry-standard marketplace practices (similar to Airbnb, Turo, and other peer-to-peer platforms) where participant transparency is necessary for marketplace integrity.
• Deleting your account removes your public profile. If you no longer wish to have a public profile on the Platform, you may delete your account, which will remove your profile and all associated publicly visible data.

6.4 Your Rights Regarding Your Public Profile

You have the right to:

• Update your profile information — You may update your display name and avatar/photo at any time through your account settings.
• Request correction — If your profile displays inaccurate information, you may correct it through your account settings or by contacting us at team@rentalabs.io.
• Delete your account — Deleting your account will remove your public profile from the Platform. See Section 10 (California) or Section 12 (International) for details on exercising your right to deletion.

6.5 Legal Basis for Public Profiles

• CCPA/CPRA: Public profile information constitutes personal information disclosed for a business purpose (facilitating marketplace trust and safety) under Cal. Civ. Code §1798.140(e). Because your profile information is made publicly available by you through your use of the Platform, it may be considered “publicly available information” under §1798.140(v)(2) to the extent permitted by law. However, Renta does not sell or share your public profile information for cross-context behavioral advertising.
• GDPR: The legal basis for processing and displaying public profile information is legitimate interest (Art. 6(1)(f)) — specifically, the legitimate interest of Renta and its marketplace participants in maintaining a trusted and transparent marketplace. We have conducted a balancing test and determined that the limited personal information displayed (name, photo, aggregate statistics) does not override your fundamental rights, particularly given that: (a) the data displayed is limited and non-sensitive; (b) no contact information or financial data is exposed; and (c) marketplace transparency is an expected feature of peer-to-peer platforms.
• U.S. State Privacy Laws (Virginia, Colorado, Connecticut, Oregon, Texas, etc.): Public profile information is processed for the purpose of providing the Platform service and ensuring marketplace trust. You retain your rights to access, correct, and delete your data under applicable state law, subject to the limitations described in this section.

7. Sensitive Personal Information

Renta collects driver's license numbers — classified as sensitive personal information under CCPA §1798.140(ae). This information is collected from Renters when required by the Tenant for motorized vehicle or watercraft rentals.

How We Protect Sensitive Personal Information:

• Driver's license numbers are encrypted at rest using AES-256-GCM field-level encryption
• Access is restricted to the Tenant operator (owner/manager role only) and displayed in masked format by default
• Access to unmasked driver's license numbers is logged in our audit system
• We limit use of sensitive personal information to what is necessary to provide the Platform service

8. Data Retention

9. Data Security

We implement technical and organizational security measures including: encryption of data in transit (TLS 1.2+), encryption at rest with field-level encryption for sensitive data, row-level security (RLS) ensuring strict tenant data isolation, role-based access controls, and audit logging.

10. Your Privacy Rights — California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under CCPA/CPRA:

• Right to Know (§1798.100) — what PI is collected, used, shared
• Right to Delete (§1798.105) — request deletion of your PI
• Right to Correct (§1798.106) — correct inaccurate PI
• Right to Opt Out of Sale/Sharing (§1798.120) — see Section 13
• Right to Limit Use of Sensitive PI (§1798.121) — see Section 14
• Right to Non-Discrimination (§1798.125)

How to exercise your rights: Email team@rentalabs.io. We will respond within 45 days of a verified request, extendable to 90 days with notice.

11. Your Privacy Rights — Other U.S. States

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights. Contact team@rentalabs.io to exercise them.

12. Your Privacy Rights — International Users (GDPR and Other Laws)

EU / EEA / UK: You have rights under GDPR including access, rectification, erasure, restriction, portability, objection, and complaint to your supervisory authority. International data transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. See our Data Processing Agreement.

Australia: Your information is protected under the APPs (Privacy Act 1988). You may complain to the OAIC.

Mexico: You have ARCO rights under the LFPDPPP. Contact team@rentalabs.io.

13. Do Not Sell or Share My Personal Information

Renta does not sell your personal information as defined by CCPA §1798.140(ad).

Renta does not share your personal information for cross-context behavioral advertising as defined by CCPA §1798.140(ah). Renta itself does not use third-party advertising cookies, retargeting pixels, or ad network tracking for its own purposes.

A rental operator using the Platform may choose to enable their own analytics or tag management tool (such as Google Analytics or Google Tag Manager) on their storefront. Where an operator does this, the operator — not Renta — decides what is tracked and why, and the operator is the data controller for that tracking. Renta's role is to provide the mechanism and the consent gate described in our Cookie Policy. Whether those tags load only after you give consent, or load by default with an opt-out available, depends on your region — see the region table in Section 3.1 of the Cookie Policy for exactly what applies to you. The operator's own privacy policy governs their use of that data.

We honor Global Privacy Control (GPC) signals. If you have questions about this section, email team@rentalabs.io.

14. Limit the Use of My Sensitive Personal Information

You have the right to limit our use of sensitive personal information (including driver's license numbers) to what is necessary to provide the Platform service. We already limit use to service delivery purposes only. To exercise this right, email team@rentalabs.io.

15. Children's Privacy

Renta does not knowingly collect personal information from children under 13, in compliance with COPPA. For rental activities involving minors, the parent or guardian provides all information and signs waivers on the minor's behalf.

16. Cookies and Tracking Technologies

See our Cookie Policy for details.

17. SMS / Text Messaging

Renta and its Tenants may send transactional SMS messages to Renters who provide a mobile phone number, including: one-time login codes, booking confirmations, payment links, rental waiver links, pre-rental reminders, and rental updates.

Opt-in: You may opt in to SMS through any of the following: (1) checking the SMS consent checkbox during checkout, (2) checking the SMS consent checkbox when added as a rider on a booking, or (3) enabling the SMS toggle in your account profile settings. The disclosure shown next to the checkout and rider checkboxes is: “I agree to receive SMS from Renta Labs LLC and the rental shop I'm booking with, including booking confirmations and reminders. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help. Consent is not a condition of purchase. SMS Terms & Privacy Policy.”

Opt-out: Reply STOP to any message to unsubscribe. Reply HELP for assistance. After opting out you will no longer receive non-essential SMS; we may still send messages required to fulfill an active booking via email.

Message frequency: Varies based on your rental activity.

Rates: Message and data rates may apply depending on your mobile carrier and plan. Contact your carrier for details.

Your mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

18. Third-Party Links and Services

The Platform may contain links to third-party sites. We are not responsible for their privacy practices.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated with at least 30 days' notice via email.

20. Contact Us

Renta Labs LLC
1752 W Plains Dr
Apple Valley, UT 84737
Contact: team@rentalabs.io
Platform: getrenta.io
Renta Labs (company): rentalabs.io