Privacy Policy

1. Introduction

Rental Bots, Inc. ("Rental Bots," "we," "us," "our"), a Delaware corporation operating from St. Louis, Missouri, operates a marketplace connecting people who rent out robots, technology, and equipment ("Hosts") with people who rent them ("Renters").

This Privacy Policy explains what personal information we collect, how we use and share it, and the rights and choices you have. It applies to our website, applications, and services (the "Platform").

By creating an account you affirmatively accept this Privacy Policy. We record the version, date, and time of your acceptance.

2. Information We Collect

In plain terms: we hold your email address, and your Google profile name if you sign in with Google. We hold the listings, bookings, photos and messages you create. When you accept our Terms, this Policy or the Rental Agreement, we record your IP address and browser user-agent along with the acceptance. We do not store payment card numbers, bank account numbers, government-ID images, health information, or the details extracted from your identity document on our systems.

2.1 Information you give us

Account information: name, email address, password (stored hashed — we never see it in plain text), and optionally phone number and profile photo.

Identity verification. Renters must verify their identity before booking, and Hosts before receiving a payout (Terms, Section 2). Verification is performed by Stripe Identity. You submit your government ID and a selfie directly to Stripe; those images never pass through, and are never stored on, our systems. From that process we store only three things: a status (unverified, pending, verified, or failed), a Stripe reference identifier for the verification session, and the date and time that status last changed. We do not store any document image, any ID or document number, your date of birth, or the address or legal name Stripe extracts from your document. If you delete your account, we instruct Stripe to redact the verification session, which destroys the documents it holds.

Listing information (Hosts): item details, photos, description, pricing, availability, and approximate location.

Booking information (Renters): dates, quantities, and rental history.

Communications: messages you exchange with other users through the Platform, and your correspondence with our support team. Messages between a Host and a Renter are part of the record used to decide a damage claim (Rental Agreement, Section 7).

Condition photographs: the photographs both parties take through the Platform at handoff and at return. They are the record of the item's condition under Section 7 of the Rental Agreement.

Reviews and content you post.

Payment information (Renters). Card payments are processed by Stripe. You enter your card details directly with Stripe; they never pass through, and are never stored on, our systems. We store a Stripe reference for your saved card, the card brand and last four digits, the amounts authorized, held, captured, refunded or charged for each booking, and the status and timestamps of each of those events. Under the Rental Agreement your card stays on file so that amounts owed after a rental can be charged to it; we hold only the reference, never the number.

Payout information (Hosts). Payouts are made through a Stripe connected account. Stripe collects your bank account details and the tax information it requires directly from you; we do not receive or store them. We store a Stripe reference for your connected account, its status, and the amounts paid out or reversed for each booking.

2.2 Information collected automatically

Usage data: pages viewed, features used, actions taken, timestamps.

Device and connection data: IP address, browser type, operating system, device identifiers.

Cookies and similar technologies: see Section 8.

Approximate location derived from IP address, and precise location only if you grant permission.

Legal acceptance records: the version, date, time, IP address, and browser user-agent associated with each acceptance of the Terms, this Policy, and the Rental Agreement — at account creation and, for the Rental Agreement, at each booking (Renters) and each listing and booking approval (Hosts).

2.3 Information from third parties

Authentication providers — if you sign in with a third-party account (for example, Google), we receive your name, email address, and profile photo from that provider.

Stripe — when you complete identity verification, Stripe sends us the result. That notification includes the details Stripe extracted from your document (legal name, address, document number, date of birth). We do not read or retain any of it; our systems record only the verification status, the Stripe session reference, and the time it changed. For payments and payouts, Stripe sends us the event notifications described in Section 2.1 and nothing else.

We do not receive data from fraud-prevention or advertising providers. We do not knowingly collect information from anyone under 18. See Section 10.

3. How We Use Information

We use personal information to:

• Create and manage your account and authenticate you;
• Operate the marketplace — review and publish listings, process booking requests, enable approvals, and facilitate rentals;
• Process payments, deposit holds, charges to a card on file, payouts, refunds, and fees, as the Rental Agreement provides;
• Verify identity and prevent fraud, abuse, and unlawful use of the Platform;
• Decide damage claims under Section 8 of the Rental Agreement, using condition photographs and messages as the record;
• Communicate with you about bookings, account activity, security, and support;
• Send marketing communications where permitted (you may opt out at any time);
• Enforce our Terms and the Rental Agreement, investigate disputes, and protect the safety of users and the public;
• Analyze and improve the Platform;
• Comply with legal obligations, including tax reporting.

Legal bases (where applicable): performance of a contract, our legitimate interests in operating and securing the Platform, compliance with legal obligations, and your consent where required.

4. How We Share Information

We do not sell your personal information. We share it only as described here.

With the other party to a rental, in limited form. When a booking is requested or confirmed, the Host and Renter see the information necessary to complete the rental (for example, first name, profile photo, booking dates, quantity, and — once confirmed — contact or pickup details). Condition photographs and messages are visible to both parties. We do not display your email address, phone number, or precise address publicly; listings show only approximate location until a booking is confirmed. If an item is not returned, we may disclose to the Host the name, email address and phone number on the Renter's account, the booking's pickup and return details, and confirmation that identity verification was completed, under the conditions in Section 5.4 of the Rental Agreement — and we notify the Renter unless the law or law enforcement requires otherwise.

Service providers. We disclose it only to the service providers below, each of which processes it solely to operate Rental Bots on our behalf.

These receive information you give us:

• Supabase — database, authentication, and file storage. Holds your account credentials, profile, listings, bookings, messages, notifications, uploaded and condition photos, and our record of your acceptance of the Terms, this Policy and the Rental Agreement, which includes your IP address.
• Vercel — hosting. All traffic to this site passes through Vercel, including request data and session cookies.
• Resend — transactional email. Receives your email address and booking details in order to send booking notifications.
• Stripe — identity verification, payments, and payouts. Receives your government ID image and selfie directly from your device; your card details directly from your browser; and, for Hosts, your bank and tax details directly from you. We receive back only the statuses, references and amounts described in Section 2.1.
• Google — optional sign-in. If you sign in with Google, we receive your email address and Google profile name.
• Mailchimp (Intuit) — marketing email. Receives your email address if you join the waitlist, and nothing else.
• Sentry — error monitoring, on our servers only. Receives diagnostic data when a request fails. It is configured not to collect personal data (sendDefaultPii is off) and every event is passed through a scrubber before it is sent. No Sentry code runs in your browser.

This receives only technical information when your browser loads part of a page:

• Google Fonts — your IP address and browser information, on the landing page and Host pages, because fonts load from Google's servers.

We do not use analytics, advertising, or tracking services, and no advertising or tracking company receives information from this site. Supabase and Vercel operate on Amazon Web Services, and your information is stored in the United States.

For legal reasons: to comply with law, subpoena, or lawful request; to enforce our Terms or the Rental Agreement; to investigate fraud or security issues; or to protect the rights, property, or safety of Rental Bots, our users, or the public.

Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

With your consent, or at your direction.

5. Data Security

We use technical and organizational safeguards to protect your information, including: encryption in transit (HTTPS/TLS); row-level access controls in our database so that a user's records are accessible only to that user and to those with a legitimate need (for example, the counterparty to a confirmed booking); authentication gating — account data is not accessible to unauthenticated visitors; restricted internal access on a need-to-know basis; and logging and monitoring.

No system is perfectly secure. We cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and applicable authorities as required by law, including Missouri's data-breach notification statute (Mo. Rev. Stat. § 407.1500), Delaware's (6 Del. C. § 12B-101 et seq.), and the law of any other state that applies to you.

6. Data Retention

We retain personal information for as long as your account is active and thereafter as needed to: complete transactions, resolve disputes, enforce our agreements, comply with legal, tax, and accounting obligations, and maintain security records. Condition photographs and booking messages are kept at least through the damage-claim window and any dispute under Section 8 of the Rental Agreement, and thereafter as needed for the purposes above. Retention periods vary by data type. When no longer needed, we delete or de-identify it.

7. Your Rights and Choices

7.1 All users

Access and update your account information at any time in your account settings.

Download your data — your account settings include a self-serve export of your profile, listings, bookings and messages. No request or waiting period is required.

Delete your account — your account settings include self-serve deletion. Some information may be retained as described in Section 6, including your record of accepting these documents, which we keep as proof of consent and to comply with our legal obligations, and payment records we are required to keep.

Opt out of marketing via the unsubscribe link or account settings. We will still send transactional messages (booking and security notices).

Cookie choices — see Section 8.

7.2 California residents (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we collect, use, disclose, and the categories of sources and recipients; access a copy of your personal information (portability); delete your personal information, subject to exceptions; correct inaccurate personal information; limit use of sensitive personal information; opt out of "sale" or "sharing" — we do not sell or share personal information as those terms are defined under the CCPA/CPRA; and non-discrimination for exercising your rights.

To exercise these rights, contact support@rentalbots.co. We will verify your request and respond within the timeframes required by law. You may use an authorized agent.

7.3 Other U.S. state privacy laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others as they take effect) may have similar rights to access, correct, delete, and appeal. Contact support@rentalbots.co.

7.4 Users outside the United States

The Platform is operated in the United States. If you access it from elsewhere, your information will be transferred to and processed in the U.S., where privacy laws may differ. Where GDPR or similar law applies, you may have additional rights, including objection, restriction, and lodging a complaint with a supervisory authority.

8. Cookies and Tracking

We use cookies and similar technologies strictly to operate the Platform — to keep you signed in, remember your preferences, and secure your session. We do not currently use advertising cookies or third-party tracking cookies.

You can control cookies through your browser settings; disabling some cookies may break functionality (for example, staying logged in).

We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing for an opt-out preference signal such as Global Privacy Control to opt you out of. If we ever introduce advertising or analytics cookies, we will update this Policy, provide a cookie-preference control, and honor GPC signals as required by law.

9. Automated Decisions

We do not currently use automated decision-making, profiling, or risk scoring. Damage claims under the Rental Agreement are decided by a person at Rental Bots against a written standard. If we introduce automated fraud detection, we will update this Policy, and such tools will not produce legal or similarly significant effects about you without human review where such review is required by law.

10. Children's Privacy

The Platform is not intended for anyone under 18, and we do not knowingly collect personal information from minors. If we learn that we have collected information from a person under 18, we will delete it. Contact support@rentalbots.co if you believe a minor has provided us information.

11. Third-Party Links

The Platform may link to third-party sites and services. We are not responsible for their privacy practices. Review their policies separately.

12. Changes to This Policy

We may update this Policy. If changes are material, we will notify you (for example, by email or an in-Platform notice), update the "Last updated" date, and, where required, ask you to re-accept. Continued use after the effective date constitutes acceptance.

13. Contact Us

Rental Bots, Inc. — a Delaware corporation operating from St. Louis, Missouri. Attn: Privacy. support@rentalbots.co.

To exercise privacy rights, email support@rentalbots.co with the subject line "Privacy Request." Most access and deletion requests can be completed instantly and without contacting us from your account settings (see Section 7.1). If you require a physical address for formal correspondence, email us and we will provide our registered agent's address.