Privacy Policy
RentalSurely is operated by LENGVIN, MB, Lithuania (“we”). This policy explains what personal data the Service handles and how. Questions: info@rentalsurely.com.
1. Two roles
For the account data of the rental companies using RentalSurely (names, emails, login and usage records) we are the data controller. For the data those companies put into the Service about their customers — contact details, bookings, documents, inspection photos — we are a data processor acting on the company’s instructions; that company is the controller of its customers’ data.
2. What we collect
- Account data: your name, email, password (stored only as a salted hash), company details you provide.
- Operational data: everything your team enters — catalogue, customers, bookings, invoices, inspection checklists and photos.
- Technical data: server logs (IP address, time, requested page) kept for security and troubleshooting.
We do not run advertising trackers and we do not sell data.
3. What it’s used for
Solely to provide, secure and improve the Service: signing you in, storing and displaying your operational data, sending the emails the Service generates (quotes, invoices, condition-check links, password resets, notifications your team triggers), and diagnosing faults.
4. Subprocessors
Data is hosted and processed within the EU where available. We use:
- Neon (database hosting, EU region)
- Hostinger (application hosting)
- Anthropic (only when you use the AI intake feature: the photo you submit is sent for identification and not used to train models)
- Stripe (payments, when subscription billing is enabled)
- OpenRouteService (HeiGIT, Germany) and the OpenStreetMap Foundation (Nominatim) — only when delivery pricing is switched on: the delivery address is sent to locate it and measure the drive; nothing else about the booking is included
- Your e-mail provider (the SMTP service configured for outbound mail, currently Hostinger)
- Apple / Google (mobile app distribution)
5. Retention
Operational data is kept for as long as your account exists. After account deletion we remove your data within 30 days, except records we must keep by law (e.g. issued invoices). Server logs rotate within 90 days. Public share links (quotes, support threads) stop working when the underlying record is deleted.
6. Your rights
Under the GDPR you can request access to, correction of, export of, or deletion of your personal data, and you can complain to the Lithuanian State Data Protection Inspectorate (VDAI). For data your rental company holds about you as their customer, contact that company — we act on their instructions. Requests to us: info@rentalsurely.com.
7. Security
All traffic is encrypted (HTTPS). Passwords are hashed with bcrypt. Each company’s data is isolated per tenant at the application layer. Access links sent to customers use long random tokens. Report security concerns to info@rentalsurely.com.
8. Cookies
The Service uses only functional cookies: your session, language and theme preferences. No third-party advertising or analytics cookies are set.
On the public pages (not inside the app) we count visits without cookies or visitor identifiers: once per browser tab, the page records where the visit came from (for example “google” or “direct”) in the tab’s session storage, which is cleared when the tab closes. Only daily totals per source are stored. If you request a demo, download a document or create an account in that tab, the same source word is saved with your request.