Privacy Policy

1. Information We Collect

Account information: When you register, we collect your name, email address, password (hashed), and selected role (host or renter).

Identity verification (KYC): To comply with legal requirements and maintain platform safety, we collect government-issued identification documents and a selfie for identity verification. These are processed by our KYC provider and retained in encrypted storage.

Driver’s license information: Renters provide driver’s license details (including the last 4 digits) as part of their profile. Full license data submitted during KYC is handled by our identity verification partner.

Vehicle information: Hosts provide vehicle details including make, model, year, VIN, license plate, photos, and rental terms.

Payment information: Payment details are processed directly by Stripe and are not stored on Ridacity servers. We retain transaction records (amounts, dates, booking references) for accounting and dispute purposes.

Usage data: We collect log data including IP addresses, browser type, pages visited, and actions taken on the platform to improve our Services and detect abuse.

Communications: Messages sent between hosts and renters through the platform are stored to enable the messaging feature and to resolve disputes.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Ridacity platform
• Verify your identity and prevent fraud
• Process payments and payouts
• Facilitate communication between hosts and renters
• Send transactional notifications (booking confirmations, receipts, security alerts)
• Resolve disputes and enforce our Terms of Service
• Comply with legal obligations
• Monitor platform security and detect abuse

We do not use your personal information for advertising or sell it to third parties for marketing purposes.

3. How We Share Your Information

With other users: When a booking is confirmed, we share relevant contact and vehicle information between the host and renter to facilitate the rental (e.g., the renter’s name for the authorization letter; the host’s contact for pickup coordination).

Service providers: We share data with trusted third-party providers who help us operate the platform, including Stripe (payments), Supabase (database and storage), SendGrid (email), Twilio (SMS), and Sentry (error monitoring). These providers are bound by data processing agreements and may not use your data for their own purposes.

Legal compliance: We may disclose your information when required by law, court order, or government authority, or when necessary to protect the rights, property, or safety of Ridacity, our users, or the public.

Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies & Tracking

We use session cookies to authenticate users and maintain your login state. We do not use advertising or tracking cookies. See our Cookie Policy for details.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. After account closure, we retain transaction records and KYC data for up to seven years to comply with financial regulations and legal obligations. You may request deletion of other personal data by contacting us at privacy@ridacity.com; however, we may retain certain data where required by law.

6. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage for sensitive documents, and access controls that limit data access to authorized personnel. While we take reasonable precautions, no internet transmission or storage system is 100% secure. We encourage you to use a strong, unique password and to notify us immediately of any suspected unauthorized access.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.

To exercise these rights, contact us at privacy@ridacity.com. We will respond within 30 days.

8. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: