Privacy Policy
Last Updated: May 17, 2026
This Privacy Policy describes how Renta Labs LLC (“Renta,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information through our platform at getrenta.io and all associated tenant storefronts, services, and APIs (collectively, the “Platform”).
Where we operate: The Platform runs on getrenta.io and Renta-hosted tenant storefront URLs. Separately, Renta Labs LLC publishes corporate information about the company at rentalabs.io.
This Privacy Policy applies to all users of the Platform, including rental business operators (“Tenants”), consumers who book rentals (“Renters”), and visitors to our website (“Visitors”).
1. Who We Are
Renta Labs LLC is a Utah limited liability company that operates the Renta platform, a multi-tenant SaaS platform connecting independent rental businesses with consumers seeking to rent outdoor recreation and other equipment.
Contact Information:
Address: 1752 W Plains Dr
Apple Valley, UT 84737
Privacy inquiries: privacy@getrenta.io
General inquiries: legal@getrenta.io
Platform: getrenta.io
Renta Labs (company): rentalabs.io
Our Role in Data Processing:
- For Tenant business data (your account, billing, usage): Renta is the data controller.
- For Renter personal data (customer information collected through tenant storefronts): Renta is a data processor acting on behalf of the Tenant, who is the data controller.
2. Categories of Personal Information We Collect
2.1 From Tenants (Rental Business Operators)
| Category | Specific Data Elements |
|---|---|
| Identifiers | Full name, email address, phone number, business name, business address |
| Financial information | Stripe account ID, subscription and billing data, transaction history |
| Professional information | Business type, business license details, industry |
| Internet/electronic activity | IP address, browser type, OS, pages visited, clicks, access times, referring URL |
2.2 From Renters (End Consumers)
| Category | Specific Data Elements |
|---|---|
| Identifiers | Full legal name, email address, phone number, mailing address, date of birth |
| Government-issued identification | Driver's license number, driver's license state ⚠️ Sensitive Personal Information |
| Biometric-adjacent data | Digital signature data (drawn signature) |
| Financial information | Payment card last four digits, card brand (full card numbers are never stored by Renta — processed exclusively by Stripe) |
| Transaction data | Booking history, amounts paid, rental details, deposit amounts |
| Personal characteristics | Swimming ability (for watercraft), experience/skill level |
| Internet/electronic activity | IP address at time of waiver signing, browser and device data |
| Emergency contacts | Emergency contact name, phone number, relationship |
2.3 From Website Visitors
| Category | Specific Data Elements |
|---|---|
| Internet/electronic activity | IP address, browser type, device info, pages visited, referring URL, access times |
| Cookie data | Session identifiers, preferences, analytics data (see our Cookie Policy) |
3. Sources of Personal Information
- Directly from you — account creation, booking forms, digital waivers, contact forms
- Automatically through technology — cookies, server logs, similar technologies (see our Cookie Policy)
- From Stripe — payment verification data, identity verification results
- From Supabase — authentication and session data
- From Tenant operators — when a Tenant manually enters customer information
4. How We Use Your Personal Information
| Purpose | Categories of PI Used |
|---|---|
| Providing the Platform service | Identifiers, transaction data, internet activity |
| Processing payments | Identifiers, financial information, transaction data |
| Identity verification and fraud prevention | Government ID, identifiers |
| Generating and storing digital waivers | Identifiers, government ID, signature data, IP address |
| Transactional communications | Identifiers (name, email) |
| Customer relationship management | Identifiers, transaction data, booking history |
| Platform analytics and improvement | Internet activity (aggregated/anonymized where possible) |
| Legal compliance | All categories as needed |
| Marketing communications (with consent) | Identifiers (name, email) |
| Security | Internet activity, identifiers |
5. How We Share Your Personal Information
5.1 With Tenant Operators
When a Renter makes a booking, their personal information is shared with the specific Tenant operating the rental business they booked with. The Tenant is the data controller for this data.
5.2 With Service Providers (Sub-processors)
| Service Provider | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing, identity verification, payouts | stripe.com/privacy |
| Supabase (hosted on AWS) | Database hosting, authentication, file storage | supabase.com/privacy |
| Resend | Transactional email delivery | resend.com/legal/privacy-policy |
| Vercel | Application hosting | vercel.com/legal/privacy-policy |
| Surge | Transactional SMS delivery | surge.app/privacy |
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
5.3 With Law Enforcement
We may disclose personal information when required by valid legal process, including subpoenas, court orders, or government requests.
5.4 In Business Transfers
If Renta is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction.
We do not sell your personal information. See Section 13.
6. Public Marketplace Profiles
Renta operates a marketplace where Tenants and Renters transact with one another. To foster trust and safety in this marketplace, Renta creates a public profile page for every user who creates an account on the Platform. Your public profile is accessible at a URL in the format /users/{your-slug}/profile.
6.1 Information Displayed on Your Public Profile
The following personal information is displayed publicly on your profile and is visible to anyone who visits your profile page, including other Platform users and the general public:
| Data Element | Description |
|---|---|
| Name | The display name associated with your account |
| Avatar / photo | Your profile photo, if you have uploaded one |
| Member since date | The date you created your account |
| Verified badges | Indicators of completed verification steps (e.g., email verified, phone verified, ID verified) |
| Booking count | An aggregate number of completed bookings (the total count only — no details) |
| Rating | An aggregate rating score based on reviews from other users |
6.2 Information Never Displayed on Your Public Profile
The following personal information is never displayed on your public profile and is not accessible to other users or the general public through your profile page:
- Email address
- Phone number
- Payment information (card details, bank information)
- Booking details (specific shops, dates, amounts, equipment rented)
- Driver's license information (number, state, scans)
- Physical or mailing address
6.3 Public Profiles as a Core Marketplace Feature
Public profiles are an integral part of Renta's marketplace trust and safety infrastructure. They enable Tenants and Renters to evaluate the reputation and legitimacy of the parties they transact with before committing to a rental. Because of this essential marketplace function:
- Your public profile is created automatically when you create an account on the Platform.
- Public profiles cannot be hidden, made private, or opted out of. This is consistent with industry-standard marketplace practices (similar to Airbnb, Turo, and other peer-to-peer platforms) where participant transparency is necessary for marketplace integrity.
- Deleting your account removes your public profile. If you no longer wish to have a public profile on the Platform, you may delete your account, which will remove your profile and all associated publicly visible data.
6.4 Your Rights Regarding Your Public Profile
You have the right to:
- Update your profile information — You may update your display name and avatar/photo at any time through your account settings.
- Request correction — If your profile displays inaccurate information, you may correct it through your account settings or by contacting us at privacy@getrenta.io.
- Delete your account — Deleting your account will remove your public profile from the Platform. See Section 10 (California) or Section 12 (International) for details on exercising your right to deletion.
6.5 Legal Basis for Public Profiles
- CCPA/CPRA: Public profile information constitutes personal information disclosed for a business purpose (facilitating marketplace trust and safety) under Cal. Civ. Code §1798.140(e). Because your profile information is made publicly available by you through your use of the Platform, it may be considered “publicly available information” under §1798.140(v)(2) to the extent permitted by law. However, Renta does not sell or share your public profile information for cross-context behavioral advertising.
- GDPR: The legal basis for processing and displaying public profile information is legitimate interest (Art. 6(1)(f)) — specifically, the legitimate interest of Renta and its marketplace participants in maintaining a trusted and transparent marketplace. We have conducted a balancing test and determined that the limited personal information displayed (name, photo, aggregate statistics) does not override your fundamental rights, particularly given that: (a) the data displayed is limited and non-sensitive; (b) no contact information or financial data is exposed; and (c) marketplace transparency is an expected feature of peer-to-peer platforms.
- U.S. State Privacy Laws (Virginia, Colorado, Connecticut, Oregon, Texas, etc.): Public profile information is processed for the purpose of providing the Platform service and ensuring marketplace trust. You retain your rights to access, correct, and delete your data under applicable state law, subject to the limitations described in this section.
7. Sensitive Personal Information
Renta collects driver's license numbers — classified as sensitive personal information under CCPA §1798.140(ae). This information is collected from Renters when required by the Tenant for motorized vehicle or watercraft rentals.
How We Protect Sensitive Personal Information:
- Driver's license numbers are encrypted at rest using AES-256-GCM field-level encryption
- Access is restricted to the Tenant operator (owner/manager role only) and displayed in masked format by default
- Access to unmasked driver's license numbers is logged in our audit system
- We limit use of sensitive personal information to what is necessary to provide the Platform service
8. Data Retention
| Data Category | Retention Period |
|---|---|
| Tenant account data | Duration of account + 90 days post-termination |
| Payment and transaction records | 7 years (IRS requirements) |
| Waiver and signature data | 7 years from booking completion |
| Driver's license numbers | 90 days after booking completion |
| Server and application logs | 90 days |
9. Data Security
We implement technical and organizational security measures including: encryption of data in transit (TLS 1.2+), encryption at rest with field-level encryption for sensitive data, row-level security (RLS) ensuring strict tenant data isolation, role-based access controls, and audit logging.
10. Your Privacy Rights — California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under CCPA/CPRA:
- Right to Know (§1798.100) — what PI is collected, used, shared
- Right to Delete (§1798.105) — request deletion of your PI
- Right to Correct (§1798.106) — correct inaccurate PI
- Right to Opt Out of Sale/Sharing (§1798.120) — see Section 13
- Right to Limit Use of Sensitive PI (§1798.121) — see Section 14
- Right to Non-Discrimination (§1798.125)
How to exercise your rights: Email privacy@getrenta.io. We will respond within 45 days of a verified request, extendable to 90 days with notice.
11. Your Privacy Rights — Other U.S. States
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights. Contact privacy@getrenta.io to exercise them.
12. Your Privacy Rights — International Users (GDPR and Other Laws)
EU / EEA / UK: You have rights under GDPR including access, rectification, erasure, restriction, portability, objection, and complaint to your supervisory authority. International data transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. See our Data Processing Agreement.
Australia: Your information is protected under the APPs (Privacy Act 1988). You may complain to the OAIC.
Mexico: You have ARCO rights under the LFPDPPP. Contact privacy@getrenta.io.
13. Do Not Sell or Share My Personal Information
Renta does not sell your personal information as defined by CCPA §1798.140(ad).
Renta does not share your personal information for cross-context behavioral advertising as defined by CCPA §1798.140(ah). We do not use third-party advertising cookies, retargeting pixels, or ad network tracking on the Platform.
We honor Global Privacy Control (GPC) signals. If you have questions about this section, email privacy@getrenta.io.
14. Limit the Use of My Sensitive Personal Information
You have the right to limit our use of sensitive personal information (including driver's license numbers) to what is necessary to provide the Platform service. We already limit use to service delivery purposes only. To exercise this right, email privacy@getrenta.io.
15. Children's Privacy
Renta does not knowingly collect personal information from children under 13, in compliance with COPPA. For rental activities involving minors, the parent or guardian provides all information and signs waivers on the minor's behalf.
16. Cookies and Tracking Technologies
See our Cookie Policy for details.
17. SMS / Text Messaging
Renta and its Tenants may send transactional SMS messages to Renters who provide a mobile phone number, including: one-time login codes, booking confirmations, payment links, rental waiver links, pre-rental reminders, and rental updates.
Opt-in: You may opt in to SMS through any of the following: (1) checking the SMS consent checkbox during checkout, (2) checking the SMS consent checkbox when added as a rider on a booking, or (3) enabling the SMS toggle in your account profile settings. The disclosure shown next to the checkout and rider checkboxes is: “I agree to receive SMS from Renta Labs LLC and the rental shop I'm booking with, including booking confirmations and reminders. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help. Consent is not a condition of purchase. SMS Terms & Privacy Policy.”
Opt-out: Reply STOP to any message to unsubscribe. Reply HELP for assistance. After opting out you will no longer receive non-essential SMS; we may still send messages required to fulfill an active booking via email.
Message frequency: Varies based on your rental activity.
Rates: Message and data rates may apply depending on your mobile carrier and plan. Contact your carrier for details.
Your mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.
18. Third-Party Links and Services
The Platform may contain links to third-party sites. We are not responsible for their privacy practices.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated with at least 30 days' notice via email.
20. Contact Us
Renta Labs LLC
1752 W Plains Dr
Apple Valley, UT 84737
Privacy inquiries: privacy@getrenta.io
General inquiries: legal@getrenta.io
Platform: getrenta.io
Renta Labs (company): rentalabs.io