Privacy Policy

1. Who we are

You Can Do Inc. ([to be confirmed]) operates YouCanDo Rent and is responsible for the personal information described here. For privacy questions or requests, write to privacy@rentycd.com.

2. Information we collect

• Account details: your name, email address, password (stored only in hashed form by our sign-in service) and language.
• Identity verification: when you verify, Stripe Identity collects images of your driver’s license and tells us whether verification succeeded. We keep the result, not the images.
• Listings (hosts): vehicle details, photos, location, prices, mileage limits, availability, add-ons and delivery options.
• Bookings and trips: dates, pickup and return details, a delivery address if you choose delivery, check-in photos and videos of the odometer, fuel gauge and vehicle condition, readings taken from them, extra charges, booking chat messages and reviews.
• Payments: Stripe processes cards and payouts. We receive limited details, such as the card brand, the last four digits and the status of payments and refunds. Hosts’ bank and tax details are held by Stripe Connect, not by us.
• Location: the addresses and places you type or pick on the map. We do not track your device’s location.
• Device and usage data: IP address, browser and device type, pages visited, and logs needed to run and secure the service.
• Communications: emails you send us and your support conversations.

3. How we use it

• To run YouCanDo Rent: accounts, listings, bookings, payments, payouts, check-ins and extra charges.
• To verify identities, keep the platform safe and prevent fraud.
• To send service emails, such as verification codes, booking confirmations and receipts. We send email through our email provider, Resend. We do not send text messages.
• To give support and help resolve problems between hosts and guests.
• To meet our legal, tax and accounting obligations and enforce our Terms of Service.
• To understand and improve the service, using analytics cookies only if you allow them.

We do not use your information for targeted advertising. If we ever send marketing emails, we will ask for your consent first, and every such email will have an unsubscribe link.

4. How we share it

• With other users, as needed for a trip: hosts and guests see each other’s name, verification status and reviews, the booking details, the pickup or delivery location and the booking chat.
• With service providers who process data for us under contract: Stripe (payments, Stripe Connect payouts and Stripe Identity verification), Resend (email delivery), Mapbox (maps and address search), an AI service provider that reads odometer and fuel gauge photos, and our hosting and storage providers.
• With authorities or others when the law requires it, or when needed to protect someone’s safety, including for accidents, tolls or traffic tickets during a trip.
• With a buyer or successor if You Can Do Inc. is involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Your Privacy Choices / Do Not Sell or Share My Personal Information

We do not sell your personal information or share it for cross-context behavioral advertising, as those terms are defined in the CCPA, and we have not done so in the past 12 months.

• Opt out anyway: email privacy@rentycd.com with the subject “Do Not Sell or Share”. You do not need an account. We will record your request and honor it for the future.
• Global Privacy Control: if your browser sends the Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale and sharing of your personal information, and we keep optional marketing cookies off in that browser. You do not need to do anything else.
• Cookies: choose which optional cookies we may use on our Cookie Preferences page.
• Sensitive personal information: we use your driver’s license verification, your account login and the contents of your booking chats only to provide the service and keep it secure, as the law permits, and not to infer anything about you.

6. Your privacy rights

Depending on where you live, including California and the other US states with consumer privacy laws, you may have the right to:

• know what personal information we collect, use and disclose, and access it;
• get a copy of it in a portable format;
• correct inaccurate information;
• delete your information;
• opt out of the sale or sharing of your information, targeted advertising and profiling;
• limit the use of sensitive personal information;
• appeal if we decline your request.

We will not discriminate against you for using these rights.

7. How to make a request

Email privacy@rentycd.com from the address on your account and tell us what you would like. We verify your identity before we act, usually by confirming that you control that email address, and we may ask for more information for sensitive requests.

We respond within 45 days. If we need more time, we may extend this by another 45 days where the law allows, and we will tell you why.

An authorized agent can make a request for you with your signed permission; we may ask you to confirm your identity with us directly.

If we decline your request, we will explain why. You can appeal by replying with “Appeal” in the subject line. We will answer in writing within the time your state’s law requires and, if you still disagree, tell you how to contact your state attorney general.

We may keep information we need for legal, tax, safety or fraud-prevention reasons, or for an open claim about a trip, as the law allows. If we do, we will tell you what we kept and why.

8. How long we keep it

We keep personal information only as long as we need it for the purposes above. Booking, payment and tax records are kept as long as the law requires, generally up to 7 years. Trip check-ins and booking chats are kept while they may be needed for a charge, claim or dispute about that trip. When your account is deleted, we delete or de-identify the rest, except what the law requires us to keep.

9. Security

We protect personal information with encryption in transit, access controls and monitoring. Card numbers are handled by Stripe and never stored on our servers. No system is perfectly secure; if a data breach affects you, we will notify you as the law requires.

10. Children

YouCanDo Rent is for adults. You must be 18 or older to create an account, and the service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact privacy@rentycd.com and we will delete it.

11. Cookies and similar technologies

We use necessary cookies and browser storage to keep you signed in, secure your session and remember your choices; preference storage to remember things like your language; and, only if you allow it, analytics cookies. We do not use advertising cookies. You can change your choices at any time on our Cookie Preferences page.

12. Categories of personal information (California)

In the past 12 months we have collected these categories of personal information, from you, from other users (such as reviews and messages), from Stripe and from your device:

• identifiers (name, email address, IP address, account ID);
• customer records and commercial information (bookings, listings, payments, refunds and charges);
• internet or network activity (usage and log data);
• geolocation data (addresses and places you enter, pickup and delivery locations);
• audio, electronic and visual information (vehicle and check-in photos and videos);
• sensitive personal information (driver’s license verification through Stripe Identity, account login, the contents of booking chat messages).

We disclose each category to our service providers for the business purposes described above. We do not sell or share any of it.

13. Changes to this policy

We will post any changes on this page and update the date at the top. If a change is material, we will tell you by email or in the app before it takes effect.

14. Contact

You Can Do Inc., [to be confirmed]. Email: privacy@rentycd.com.