Privacy Policy

2. Information We Collect

• Profile & Authentication: Name, verified email address (via Google OAuth), mobile phone number (verified via OTP), and avatar image.
• Community Affiliation & KYC Proofs: Institutional email domain (@itbhu.ac.in), student roll number, or government-issued document (Aadhaar or Driving License) submitted exclusively for administrator identity verification.
• Vehicle Listings: Vehicle make, model, rental rates, deposit requirements, guidelines, photos, and masked registration number (e.g. UP 65 ** ****) to protect owner privacy.
• Specialized Location Data (Admin-Approved Only): RentIt does not perform general GPS tracking on users or vehicles. Only specialized personnel or authorized fleet managers explicitly granted access by platform administrators may access optional GPS handover coordination.
• Communications: Encrypted in-app chat messages and booking notes exchanged between owners and renters.

3. Purpose & Use of Data

We process your data exclusively for:

• Verifying user identities and granting verified community badges.
• Enabling peer discovery, booking inquiries, and rental handovers.
• Connecting renters and owners via private, encrypted WebRTC voice calls without revealing personal phone numbers.
• Sending critical notifications (KYC decision alerts, call alerts, and booking updates).
• Enforcing safety standards, preventing fraud, and resolving vehicle return disputes.

4. No General GPS Tracking & Admin-Granted Specialized Access

RentIt does not track the real-time location or travel movements of general users or vehicles. Live GPS handover coordination is a specialized, restricted capability accessible strictly by authorized personnel granted explicit permission by platform administrators on an individual basis. For standard community members, handovers are coordinated directly without GPS tracking.

5. Peer-to-Peer Encrypted Voice Calling

RentIt includes browser-based WebRTC voice calling. Signaling is conducted securely through our server, but actual audio streams travel directly between peers using DTLS-SRTP end-to-end encryption. RentIt does not record, intercept, or listen to your voice conversations.

6. Storage, Cloud Security & AWS S3

Identity verification documents and vehicle inspection photos are securely stored in Amazon Web Services (AWS S3) in Mumbai (ap-south-1) using tenant-isolated object keys. All data in transit is encrypted with TLS 1.3, and access to identity proofs is strictly restricted to authorized administrators.

7. Payments & Financial Privacy

All online rental payments and security deposit escrows are processed via RBI-authorized, PCI-DSS certified payment gateways (e.g. Razorpay / Stripe). RentIt never stores or views sensitive credit/debit card numbers or bank PINs. The platform is not responsible for payments; transactions and settlements occur directly between peer and peer. RentIt is strictly a technology platform to connect users.

8. Zero-Data-Selling Commitment

We do not sell, rent, license, or monetize your personal information to advertisers or data brokers. Community peers only see your first name, verified badge status, community hub, rating, and masked vehicle number.

9. Data Retention & Account Deletion ("Right to be Forgotten")

You have the right to access, rectify, or permanently delete your account data at any time. You can request complete account deletion directly from your Profile settings or by submitting a request via our Support & Queries page. All personal records, uploaded KYC documents, and listings will be permanently expunged within 7 business days once active rentals are concluded.