Privacy Policy

1. Overview & who this covers

This Privacy Policy explains how ABM Technologies LLC, doing business as Rental AI ("Rental AI," "we," "us"), collects, uses, and shares information in connection with:

• Tenant accounts — the rental/fleet businesses that subscribe to Rental AI, and their admins and staff who log in to run the platform;
• End Renters — the tenant's own customers, whose personal information a tenant collects or generates through the platform in the course of a rental (for example, at booking, verification, or vehicle handover); and
• Visitors to our public marketing site, rentalai.net.

If you are an End Renter and have a question about a specific rental, please contact the rental business you booked with directly — they hold the primary relationship with you and are best placed to help. Section 8 explains how Rental AI supports those requests.

2. Our role: controller vs. processor

For tenant business account data (Section 3a), Rental AI decides how that data is used to run and improve the platform, and acts as the data controller (or "business," under CCPA-style terminology).

For End Renter personal data that a tenant collects or generates through the platform (Section 3b), the tenant decides what is collected and why, and is the data controller. Rental AI processes that data on the tenant's behalf and instructions, as a data processor / service provider, solely to provide the platform. Tenants are responsible for giving their own renters appropriate notice and obtaining any consent required under applicable law.

3. Information we collect

a. Tenant account & usage data

• Business name, admin and staff names, work email, phone number, and login credentials;
• Billing details, processed through our payment processor (we do not store full card numbers);
• Configuration data (pricing rules, locations, vehicle classes) and usage/log data needed to operate and secure the account.

b. End Renter data (collected by tenants, processed on their behalf)

Depending on how a tenant configures and uses the platform, this can include:

• Name, contact details, and date of birth;
• Driver's license images/number and a verification selfie;
• Proof-of-insurance details;
• Payment card details, tokenized and processed through Stripe;
• Rental agreements and signatures;
• Vehicle condition photos taken at pickup/return, and damage or claims documentation;
• Vehicle location and lock/unlock events during an active rental, where the tenant has enabled connected-vehicle features on a supported vehicle;
• SMS and email communications sent in connection with a reservation.

c. Marketing site visitors

• Standard technical/analytics data (pages viewed, browser type, referring site);
• Information submitted through a contact or demo-request form.

4. How we use information

• To provide, maintain, and secure the platform for tenants and their authorized users;
• To process payments, deposits, and payouts;
• To send transactional communications (booking confirmations, verification requests, receipts);
• To support identity and insurance verification and configurable risk-assessment features that a tenant enables;
• To enable connected-vehicle features (remote lock/unlock, location during an active rental) that a tenant enables on a supported vehicle;
• To provide customer support to tenants;
• To detect, investigate, and prevent fraud, abuse, and security incidents; and
• To comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use End Renter data collected on a tenant's behalf to market to that tenant's customers.

5. Subprocessors & sharing

We share information with service providers who help us deliver the platform, under contractual confidentiality and data-protection obligations. As of this Policy's last-updated date, these include:

[OPEN] Plaid's role is currently used for one tenant's fleet-financing data sync via a bridged integration rather than a general self-serve connection every tenant can enable. Confirm with Rental AI's team whether Plaid should be listed as a standing subprocessor available platform-wide, described as a limited/pilot integration, or removed until it's formalized for general tenant use.

We may also share information: with service providers under confidentiality obligations generally; when required by law, court order, or to protect rights, safety, or security; or in connection with a merger, acquisition, or sale of assets (with notice as required by law). Tenant data may be visible to Rental AI personnel and support staff as needed to operate and support the platform.

6. Data retention

We retain tenant and End Renter data for as long as the tenant's subscription is active, and for a limited period after termination to allow data export, satisfy legal, audit, or dispute-resolution obligations, and support account recovery. After that period, data is deleted or de-identified, except where longer retention is required by law.

[OPEN] Exact post-termination retention window (e.g., 90 days, consistent with common industry practice for this type of platform) needs confirmation from Rental AI's team before publishing as final.

7. Security

We use technical and organizational measures designed to protect information, including encryption in transit and at rest for stored documents and photos, access controls limiting who can view tenant data, and tenant-level data isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights & choices

If you are an End Renter — because the tenant rental business you booked with is the controller of your data, requests to access, correct, or delete your information should generally start with them. Rental AI will assist tenants in responding to verified requests consistent with our role as their processor.

If you are a tenant admin or staff user, or a marketing-site visitor — depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details in Section 13.

9. Cookies & the marketing site

rentalai.net uses a limited set of cookies for essential site functionality and basic analytics to understand how visitors use the site. We do not use third-party advertising cookies to build cross-site ad profiles.

10. Children's privacy

The platform is intended for business use and for renters who meet the minimum legal age to rent a vehicle in their jurisdiction. It is not directed at children, and we do not knowingly collect personal information from children.

11. International data transfers

Rental AI and its subprocessors primarily store and process data in the United States. Where information is transferred internationally, we rely on appropriate safeguards required by applicable law.

12. Changes to this Policy

We may update this Policy from time to time. For material changes, we will update the "last updated" date above and, where appropriate, provide additional notice.

13. Contact us

Questions about this Policy, or requests relating to your personal information, can be sent to support@rentalai.net.

[OPEN] Registered mailing address for formal notices to be added here.