Privacy Policy

1. Introduction

Simple Auto Club ("we," "us," or "our") operates the car rental service at simpleauto.app. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

2. Information We Collect

2.1 Information You Provide

• Full name, email address, and phone number
• Driver's license number and information
• Vehicle information (make, model, year, VIN, license plate)
• Digital signatures on rental agreements
• Photos of vehicle condition (check-in and check-out)
• Payment information (processed securely by Stripe)

2.2 Information Collected Automatically

• IP address and browser type when accessing our platform
• Timestamps of agreement signatures and document access
• Mileage readings recorded during rental transactions

3. How We Use Your Information

We use the information we collect to:

• Process and manage vehicle rental transactions
• Generate and deliver rental agreements for digital signature
• Send transactional SMS notifications (signature requests, rental status updates, payment reminders)
• Process payments and security deposits via Stripe
• Store vehicle condition documentation (photos)
• Generate invoices and rental records
• Maintain audit logs for security and compliance
• Communicate with you about your active rental

4. SMS Communications

We send SMS messages to customers solely for transactional purposes related to active rentals. These include:

• Signature request links for rental agreements
• Rental status updates
• Payment reminders

We do not send marketing or promotional SMS messages. You may opt out of SMS notifications at any time by replying STOP to any message. Message and data rates may apply. Message frequency varies based on rental activity. See our SMS Messaging Terms for full details.

5. Data Sharing and Third-Party Services

We share your information only with the following third-party service providers, strictly as needed to deliver our services:

• Stripe — Payment processing. Your payment card details are handled directly by Stripe and never stored on our servers. See Stripe's Privacy Policy.
• Twilio — SMS delivery for transactional notifications.
• Amazon Web Services (AWS) — Secure storage of documents and photos via S3.
• Google Workspace — Transactional email delivery via Gmail SMTP.
• Supabase — Database hosting (PostgreSQL).

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) for all communications
• Secure, hashed password storage (bcrypt)
• Pre-signed URLs with expiration for document access
• Row-level security on database queries (multi-tenant isolation)
• HTTP-only, secure session cookies
• Rate limiting on authentication endpoints
• Audit logging of sensitive operations

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including maintaining rental records for legal and accounting compliance. Rental agreements, signatures, and associated documents are retained for the duration required by applicable law. You may request deletion of your personal data by contacting us, subject to legal retention requirements.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of SMS communications by replying STOP
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at support@simpleauto.app.

9. Cookies

We use essential cookies only, required for authentication and session management. We do not use advertising or tracking cookies. No third-party analytics cookies are present on our platform.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. Rental agreements require a valid driver's license, which inherently restricts use to licensed adults.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

support@simpleauto.app