Privacy Policy

Rentovation is owned and operated by McKit Solutions LTD., an Alberta corporation in Canada (“Rentovation,” “we,” “us”). This Privacy Policy explains how we collect, use, and protect information when you use the Rentovation platform: our marketing site, the operator dashboard, and the booking storefronts we host on behalf of vehicle-rental operators.

1. Who this policy covers

Rentovation is software that independent vehicle-rental operators use to run direct bookings under their own brand. Two kinds of people interact with us:

• Operators: the businesses and people who sign up for a Rentovation account to manage a fleet. For their account data, Rentovation is the data controller.
• Renters: the customers who book a vehicle on an operator’s storefront. For renter data, the operator is the controller and Rentovation acts as a processor / service provider, handling that data only to provide the service to the operator and on the operator’s instructions. Renters should also review the policies of the operator they are booking with.

2. Information we collect

From operators

• Account details: name, business name, email, city/state, password (stored hashed).
• If you sign in with Google: your verified email and basic profile from Google.
• Fleet and business content you enter: vehicles, pricing, policies, branding, staff.
• Billing details for your Rentovation subscription, processed by our payment provider.
• A record of your agreement to our Terms of Service and this policy: when you agreed, which version, and the IP address you agreed from.

Renter information (handled on the operator’s behalf)

• Contact and booking details: name, email, phone, trip dates, the vehicle booked.
• Identity and eligibility data submitted through verification partners (for example, a driver’s-license / ID check, or insurance verification when the operator enables it). Sensitive documents are stored in access-controlled storage and are not publicly readable.
• Payment is taken through the operator’s own payment processor. Rentovation does not receive or store full card numbers; card data is handled by the processor (e.g., Stripe, Square, PayPal, Braintree, Authorize.Net, or Clover).

Collected automatically

• Log and device data (IP address, browser, pages viewed) for security and reliability.
• Essential cookies for authentication and security (see §8).
• Error reports (Sentry) when something breaks, with tokens, query strings and other secrets removed from the web addresses they contain.

Collected only with your permission

• Product analytics in the operator dashboard (PostHog): pages viewed and clicks, without the text of what you clicked or the addresses of links you clicked (link destinations are reduced to a path with ids removed; email and phone links to just “mailto:” or “tel:”), plus a masked session replay. The replay records page layout and interactions with every piece of text and every form entry masked and images blocked; the customer, booking, conversation, application and assistant screens are not recorded at all, and browser console logs are never recorded.
• Account milestones our servers record for product analytics (for example account created, trial started, vehicle added, booking created, payment captured, onboarding steps and lifecycle emails sent), sent to PostHog under a pseudonymous account id with no names or contact details. These are sent only if a member of the account allowed analytics; the latest choice made by a member applies to the account, and with no choice on record nothing is sent.
• Page analytics (Vercel Web Analytics, and Google Analytics on our marketing site).
• Campaign attribution on our marketing site: which link or campaign brought you to us (stored in a first-party cookie), and ad click identifiers only if you allow advertising.
• Advertising measurement for Rentovation’s own ads (see §3).

3. How we use information

• To provide, operate, secure, and improve the platform.
• To process bookings, deposits, agreements, and verifications you initiate.
• To send transactional and account email (and, for operators, lifecycle/product email you can opt out of).
• To prevent fraud and abuse, enforce limits, and meet legal obligations.
• To measure and improve advertising for Rentovation itself (see below).

We do not sell personal information, and we do not use renter data for our own marketing.

Advertising for Rentovation

Everything in this section happens only if you allowed advertising in Privacy choices (see §8) and your browser did not send a Global Privacy Control signal. Without that permission our marketing site loads no Meta Pixel and no Google Ads tag, and our servers store nothing for Meta about your sign-up and send Meta no record of it, then or later.

With that permission, when an operator signs up for Rentovation, starts a free trial, or makes a first subscription payment, our servers send Meta a record of that event so we can measure which of our ads work. Contact details in that record (such as email, name, city, and state) are hashed with SHA-256 before they leave our servers, and the record also includes the IP address, browser type, and the Meta advertising cookie identifiers from our marketing site. We store this sign-up information only to match the later trial and payment records. We delete it when the first subscription payment goes through, and otherwise in a daily cleanup once it is 45 days old.

We may also give Meta hashed lists of contact details to show our ads to people who have agreed to hear from us or from our partners, to reach people similar to them, and to exclude existing Rentovation customers from our ads. The contact details in these lists are hashed, and Meta uses them only to match people to its own users. We never use renter data for this.

To withdraw, open Privacy choices and turn advertising off. In your browser this stops the Meta Pixel and Google Ads tags immediately and removes their cookies. If you are signed in when you do it, we also record it for your account and confirm on screen when that is done (if it cannot be confirmed, the screen says so and offers a retry). For your account we add a SHA-256 hash of your account email (not the address itself) to our opt-out list: from then on our servers send Meta no record for an account with that email, we delete any sign-up information we stored for it, and we leave it out of the customer lists we give Meta. That account opt-out stays in place even if you later allow advertising again in a browser; email us to change it. If you are not signed in, or want to opt out by email, write to privacy@rentovation.co from the email address on your account and we will do the same. A request already on its way to Meta at the moment you withdraw cannot be recalled.

4. AI features

Some features use third-party AI providers. Anthropic’s Claude generates operator-facing content such as a daily fleet briefing, marketing copy, support-chat and knowledge-base answers. OpenAI checks drafted replies to operator support requests (using the support conversation), transcribes and categorizes voice or screen-recorded feedback an operator chooses to send us, and generates illustrations for our own blog (no personal data). Prompts are limited to what the feature needs; under the providers’ API terms, inputs and outputs are not used to train their models. AI output can be imperfect; operators are responsible for reviewing it before relying on or publishing it.

5. Subprocessors

We rely on a small set of vetted vendors to run the platform:

6. How we protect information

• Encryption in transit (HTTPS) and a strict content-security policy on public surfaces.
• Tenant isolation so one operator’s data is not accessible to another.
• Sensitive credentials and documents kept in access-controlled, non-public storage.
• Rate limiting, breach-password checks, and optional two-factor authentication.

No system is perfectly secure, but we work to protect your information and limit access to it.

7. Data retention

We keep information for as long as an account is active or as needed to provide the service, comply with legal and tax obligations, resolve disputes, and enforce agreements. Operators can request export or deletion of their data; renters should direct such requests to the operator they booked with, and we will assist that operator as their processor.

8. Cookies

We group what runs in your browser into three categories. Necessary services (sign-in, security and fraud checks, payment processing, saving your privacy choices, and error monitoring) are always on. Analytics and advertising are optional and off until you choose: the first time you visit, you can accept all, reject all, or choose category by category, and accepting and rejecting are equally easy. You can change your mind at any time from Privacy choices (also in the site footer and the dashboard menu); withdrawing stops those services in that page and in your other open tabs.

Your choice is saved in a first-party cookie on the site where you made it, for up to 180 days, and applies to that browser and that site only: rentovation.co, the operator dashboard and each operator’s booking storefront keep separate choices. If your browser sends a Global Privacy Control signal, we treat it as a refusal of advertising whatever you saved. Advertising tags never load on checkout, payment, identity or insurance verification, application or sign-in pages. When you sign up with advertising allowed, our servers also read the Meta advertising cookies set on our marketing site, for the server-side records described in §3. Operators can add their own advertising tags to their booking storefront; those tags load only if the renter allows advertising on that storefront, and are governed by the operator’s own privacy policy. Our fonts are served from our own servers, so no font requests go to third parties.

9. Your choices & rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain uses. Optional analytics and advertising can be switched off at any time in Privacy choices, and we honor Global Privacy Control signals as a request to opt out of advertising. Operators can exercise these rights through their account or by contacting us. Renters should contact the operator (the controller of their data) first; we will support the operator in responding.

10. Children

The platform is for businesses and adults; it is not directed to children under 18.

11. Changes

We may update this policy. Material changes will be reflected by the “Last updated” date above and, where appropriate, notice to operators.

12. Contact

Questions about privacy? Email privacy@rentovation.co or write to Rentovation, Owned and operated by McKit Solutions LTD. PO Box 55117 RPO Windermere, Edmonton AB T6W 5B4, Canada.

Rentovation is owned and operated by McKit Solutions LTD., an Alberta corporation in Canada. PO Box 55117 RPO Windermere, Edmonton AB T6W 5B4, Canada