Privacy Policy

RentSen is operated by Senvenli d.o.o., a company registered in Montenegro under registration number (CRPS) 51193954, with its registered address at TRG SUNCA BROJ 2, BUDVA 85310, MONTENEGRO.

You can contact us at info@rentsen.me.

RentSen ("RentSen", "we", "our", or "us") respects your privacy and is committed to protecting personal information. This Privacy Policy explains how personal information is collected, used, stored and shared when you use our website, platform and related services.

Depending on the context, RentSen may act in different data protection roles:

• Website visitors, prospective customers, business account holders and support contacts: RentSen processes personal information for its own business purposes and acts as a Data Controller.
• Customer operational data: Where a rental business enters or stores information relating to its customers, drivers, reservations, vehicles or other operational activities within RentSen, the rental business acts as the Data Controller and RentSen acts as a Data Processor.
• Subscription purchases and payment transactions: Paddle acts as our authorised reseller and Merchant of Record. Paddle independently processes buyer and transaction information for purposes including payment processing, invoicing, tax compliance, fraud prevention, subscription administration and refunds. Where buyer or transaction information is shared between Paddle and RentSen, each party acts as an independent Data Controller for its respective processing purposes.

For information about how Paddle processes personal information, please refer to Paddle's Privacy Notice.

For information about cookies and similar technologies used by RentSen, please refer to our Cookie Policy.

Depending on how you interact with RentSen, we may collect the following categories of information.

2.1 Account and Business Information

This may include:

• name;
• email address;
• telephone number;
• company name and business information;
• account role and permissions;
• authentication information, such as password hashes and account security information; and
• subscription and account status information.

We do not store passwords in readable form.

2.2 Usage and Technical Information

We may collect technical information relating to the use of our website and Service, including:

• IP address;
• browser type;
• operating system;
• device type;
• pages or features accessed;
• session and navigation activity;
• technical errors; and
• security-related events.

This information may be used to operate, secure, troubleshoot and improve the Service.

2.3 Website Analytics

RentSen uses a self-hosted instance of Umami to understand how our website is used and to monitor website performance.

Depending on the measurement features enabled by RentSen, analytics information may include:

• page URL;
• referring website;
• browser type;
• operating system;
• device type;
• approximate country;
• campaign parameters such as utm_source, utm_medium and utm_campaign;
• page-load and performance measurements;
• selected subscription plan;
• completed signup or checkout steps;
• domain configuration choices; and
• categorical technical error codes.

Analytics events do not include names, email addresses, phone numbers, company names, passwords, payment card information or other form contents.

On sensitive signup and checkout routes, RentSen limits analytics collection and does not use session recording.

Where session recording is enabled on eligible marketing pages, it may record page interactions such as mouse movement, clicks, scrolling and navigation. Page text and information entered into forms are masked before the recording is transmitted.

Session recordings are retained for a maximum of 30 days.

Our Umami deployment is operated on RentSen-controlled infrastructure. Analytics information is not provided to an advertising analytics provider, is not used to create cross-site advertising profiles, and does not use advertising cookies.

Where this Policy states that an analytics feature may be "enabled", this means a feature that RentSen may enable or disable for its own website. A feature that is not enabled does not collect the corresponding information.

2.4 Customer Operational Data

Business customers may store information within RentSen as part of their rental operations.

This may include information relating to:

• rental customers;
• drivers;
• reservations;
• rental periods;
• pickup and drop-off information;
• vehicles and fleet records;
• maintenance records;
• uploaded documents;
• communications; and
• other operational information entered by the rental business.

Where this information contains personal data relating to customers, drivers or other individuals, the rental business remains the Data Controller and RentSen processes the information as a Data Processor on behalf of that business.

2.5 Subscription and Billing Information

Where you purchase a RentSen subscription through Paddle, we may receive information relating to the transaction, such as:

• subscription plan;
• billing cycle;
• transaction amount;
• payment status;
• Paddle customer reference;
• Paddle subscription reference;
• invoice information; and
• transaction and refund status.

Payment card information is entered directly into Paddle's checkout environment.

RentSen does not receive or store full payment card details.

Where RentSen acts as a Data Controller, we process personal information for the following purposes and legal bases.

Performance of a Contract

We may process information where necessary to:

• create and manage business accounts;
• provide access to the Service;
• administer subscriptions;
• provide requested functionality;
• communicate about your account; and
• provide customer and technical support.

Legitimate Interests

We may process information where reasonably necessary for our legitimate business interests, including:

• securing the Service;
• preventing fraud and abuse;
• investigating technical issues;
• monitoring system reliability;
• improving the Service;
• understanding website usage;
• improving user experience; and
• responding to business inquiries.

Where we rely on legitimate interests, we consider those interests against the rights and interests of affected individuals.

Legal Obligations

We may process information where necessary to comply with applicable:

• tax obligations;
• accounting obligations;
• regulatory requirements;
• legal claims;
• lawful requests from public authorities; and
• other mandatory legal requirements.

Consent

Where required by applicable law, we may rely on consent for specific processing activities, such as certain optional communications or technologies.

Where processing is based on consent, consent may be withdrawn at any time.

Withdrawal does not affect processing that was lawfully carried out before consent was withdrawn.

Where a rental business uses RentSen to process personal information relating to its customers, drivers or other individuals, the rental business determines the purposes and means of that processing and acts as the Data Controller.

RentSen acts as a Data Processor for that information.

RentSen processes such personal information only:

• on the documented instructions of the business customer;
• as necessary to provide, operate, maintain and secure the Service;
• as necessary to provide requested technical functionality; or
• where required by applicable law.

Business customers are responsible for ensuring that they have an appropriate legal basis for collecting and processing personal information through RentSen and for providing any privacy notices required by applicable law.

RentSen may use aggregated or anonymised information that no longer identifies an individual to analyse Service performance, improve functionality, produce statistics and develop the Service.

Such information is not treated as personal data where it cannot reasonably be used to identify an individual.

RentSen does not sell personal information.

We may share personal information only where necessary with service providers that support the operation of RentSen or where otherwise required by law.

These providers may include:

• infrastructure and hosting providers operating our servers and databases;
• email delivery providers used for account and service communications;
• messaging platforms operated by Meta, namely WhatsApp, Instagram and Messenger, where a rental business connects the relevant account. Messages that the rental business sends or receives through these channels are transmitted through, and processed by, the relevant platform;
• Slack, which we use to deliver internal operational alerts to RentSen staff. These alerts contain business account details, such as the business name, domain, subscription plan and payment amount, and an internal link for RentSen staff. They do not contain the contact details of the business's users or the rental business's customer data;
• document-processing providers used to extract information from documents uploaded by a business customer;
• Paddle, our authorised reseller and Merchant of Record, which handles subscription purchases, payments, invoicing, taxes, subscription administration and refunds;
• professional advisers where reasonably necessary for legal, accounting or compliance purposes; and
• public authorities, regulators or law enforcement agencies where disclosure is required by applicable law.

Where a third party processes personal information on our behalf, we require appropriate contractual and security safeguards where applicable.

Umami analytics is operated on RentSen-controlled infrastructure and is not a third party to whom RentSen discloses analytics information.

Subscription purchases are processed by Paddle, our authorised reseller and Merchant of Record.

Payment card details are provided directly to Paddle or its payment partners and do not pass through RentSen's systems.

RentSen does not store full payment card numbers or card security codes.

Paddle independently processes information relating to:

• payment execution;
• invoicing;
• tax calculation and collection;
• fraud prevention;
• subscription administration;
• payment retries;
• refunds; and
• transaction compliance.

RentSen may receive limited buyer and transaction information from Paddle where necessary to activate, maintain and administer a RentSen subscription.

Paddle's processing of personal information is governed by Paddle's Privacy Notice and its applicable legal terms.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or for longer where required by applicable law.

Business Accounts and Customer Data

Account information and Customer Data are retained while the relevant subscription or account remains active.

Following termination of a subscription, Customer Data will normally remain available for up to 30 days to allow the business customer to export its data.

After this period, Customer Data is deleted or anonymised from active production systems unless:

• a longer period is required by law;
• retention is necessary for the establishment, exercise or defence of legal claims; or
• the business customer and RentSen have agreed otherwise in writing.

Financial and Transaction Records

Financial, billing, invoice and transaction records may be retained for the period required by applicable tax, accounting, commercial and regulatory laws.

Analytics Data

Website analytics data is retained for a maximum of 12 months, after which it is deleted or aggregated unless a shorter retention period applies to a specific analytics feature.

Session recordings are retained for a maximum of 30 days.

Application and Security Logs

Application and security logs are automatically rotated and are generally retained for no longer than 30 days, unless a longer period is required to investigate a security incident, technical problem, abuse or legal issue.

Backups

Encrypted backups are created regularly for security and disaster-recovery purposes.

Backups are retained for a maximum of 30 days and are automatically replaced or deleted according to the backup retention cycle.

Personal information deleted from active systems may therefore remain temporarily within encrypted backups until the relevant backup expires.

We implement reasonable technical and organisational measures designed to protect personal information against:

• unauthorised access;
• unauthorised disclosure;
• alteration;
• loss;
• destruction; and
• misuse.

These measures may include access controls, encrypted communications, encrypted backups, authentication controls, logging and infrastructure security practices.

Access to personal information is limited to persons and service providers that require access for legitimate operational purposes.

No method of electronic storage or transmission can guarantee absolute security, and we cannot guarantee that unauthorised access will never occur.

RentSen and some of its service providers may process personal information in countries other than the country in which the relevant individual is located.

Where applicable data protection law restricts international transfers, RentSen uses appropriate transfer mechanisms as required by law.

These may include:

• adequacy decisions;
• Standard Contractual Clauses;
• contractual data-protection safeguards; or
• other legally recognised transfer mechanisms.

Third-party providers, including Paddle, Meta and Slack, may maintain their own international transfer arrangements as described in their privacy notices and contractual documentation.

Depending on applicable law and the circumstances of the processing, individuals may have the right to:

• request access to personal information;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• request restriction of processing;
• object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data protection supervisory authority.

These rights may be subject to conditions, limitations or exemptions under applicable law.

Information Controlled by RentSen

Where RentSen acts as the Data Controller, requests may be submitted to:

info@rentsen.me

We may need to verify your identity before responding to a request.

Information Controlled by a Rental Business

If your personal information is contained in a RentSen account operated by a rental business—for example, because you made a rental reservation with that business—the rental business is normally the Data Controller for that information.

In those circumstances, you should normally direct your request to the relevant rental business.

Where required, RentSen will reasonably assist its business customers in responding to data protection requests relating to information that RentSen processes on their behalf.

RentSen is a business-to-business service and is not intended to be used directly by children.

We do not knowingly create RentSen business accounts for children.

Where a rental business enters information relating to an individual who is a minor as part of its legitimate rental operations, that rental business is responsible for ensuring that the information is collected and processed lawfully.

RentSen's use of cookies, browser storage and similar technologies is described separately in our Cookie Policy.

Our self-hosted Umami analytics configuration is designed to operate without advertising cookies and without creating cross-site advertising profiles.

Where we introduce technologies that require consent under applicable law, they will not be activated before the required consent has been obtained.

We may update this Privacy Policy from time to time to reflect changes to the Service, our data-processing practices or applicable legal requirements.

The latest version will be published on this page together with its updated date.

Where a change materially affects how we process personal information, we may provide additional notice before the change takes effect where appropriate or required by law.

For privacy-related questions, requests or concerns, please contact:

Senvenli d.o.o.

TRG SUNCA BROJ 2

BUDVA 85310

MONTENEGRO

Email: info@rentsen.me