Privacy policy

This section is about us. It covers the people who OPERATE a rental business on this platform, not the customers who rent from them.

Staff accounts

Name, phone number and role for each person the company owner gives access to. The sign-in PIN is never stored: what is kept is a SHA-256 hash salted with that staff member own account id, so the same PIN chosen by two people produces two different hashes and a stolen table cannot be reversed with a precomputed list.Created by the company owner. Staff never register themselves.

Paired devices

One record per phone a staff member signs in on: a device label, when it was paired, when it was last seen, and the hash of that device current refresh token. The token itself is returned once and never stored.

Enquiries to us

If you write to us about buying or supporting the product, we keep what you sent and our reply for as long as we are dealing with you and a reasonable period afterwards. This website collects nothing on its own: it has no form, no newsletter and no sign-up, and its content policy forbids a browser from submitting one.

Technical error reports

When something fails, the software records a fault code, which screen it happened on, the software version, and the company it happened for where that is known. Repeats of the same fault increment a counter on one row rather than writing a new one. Every payload passes an allowlist filter before storage that strips phone numbers, names, identity-document values, tokens, PINs and file addresses.No customer record has ever been part of an error report by design.

This section describes information the rental company controls and RentnRide stores on its behalf. Everything listed is scoped to that one company: a company can only ever read rows carrying its own identifier, and that identifier is derived by the server from the address the request arrived on, never from anything the sender supplies.

Name and phone number

The renter name and mobile number, held once per company. This is the identity a booking is attached to; there is no customer account and no customer password anywhere in this product.

Identity and driving-licence numbers

The number itself is NEVER stored. What is stored is an HMAC-SHA256 fingerprint of it, computed with a secret key held only by the server, which lets the company recognise a returning customer and check its own barred list without ever holding the number. The number cannot be recovered from the fingerprint, including by us.

Photographs of an identity document

Stored as a file whose name begins with the company own identifier, and DELETED when the booking is closed at the return handover — the file and the pointer to it both. The single exception is a rider the company has barred, whose document is kept because it is the evidence for the bar.The deletion runs at the moment of return, not on a later sweep.

Handover records

For each give-out and take-back: the rider name and phone, an optional driver name and phone, the odometer reading, the fuel level, the accessories checked off, and any damage note. Rider identity is recorded here rather than on the booking because the person who rides away is not always the person who booked.

Condition and damage photographs

Files under the company own identifier, capped in size and in number per booking. Each handover is stamped, at the moment the photographs are taken, with the date they become due for deletion — the company own window, sixty days unless it sets another.

Bookings and the payment ledger

The vehicle, the period, the agreed figures, and one row per payment leg: what kind it was, how it was taken (cash, bKash, Nagad or card), an optional reference — typed by the staff member, or handed back by the payment gateway on a card payment — the amount, and who recorded it when. Amounts are whole paisa, never a decimal.No card number is held here or anywhere else in this product, and no rental money is held by RentnRide: a card payment settles into the rental company own gateway account, and every other leg is a written record of money that changed hands elsewhere.

Card payment attempts

When a renter starts a card payment on a company public page, a row is written before they are sent to the gateway: the name and mobile number they typed, the vehicle and the period they asked for, the amount, and the status the gateway later reports. It is written whether the payment succeeds or not, because an attempt that failed is what explains a booking the renter believes they made.Card details are typed on the gateway own page and are never sent to this product. What returns is a status, an amount and a reference.

Enquiries from a company public page

The phone number and message a visitor types, the vehicle they were looking at, and a SHA-256 hash of their network address. The address itself is never written down; the hash exists only so an abusive flood can be capped, and it is salted per company so the same visitor is not linkable across two companies. Where the visitor is asking for a particular vehicle and says they have already sent money by bKash, Nagad or bank transfer, the row also carries what they say: the method, the amount, the reference they typed, and the period they want. That is recorded and shown to the company as an unverified CLAIM, because nothing in this product can check it — a typed reference is not proof that money arrived, and it books nothing until a staff member has seen the money and accepted it.

The audit log

Which staff account performed which action on which record, and when. The actor is taken from the signed session token, never from the request body, so it cannot be forged by the client. These rows are not deleted.

A rental company can put a QR sticker on a vehicle that opens a page on that company own web address WITHOUT a login. It exists for a roadside check: an officer scans the sticker and sees whether the vehicle papers are in order. A page reachable without a password has to be described in a privacy policy, so here is exactly what it shows.

It shows the vehicle description and registration number; whether the registration, tax token and insurance documents are on file; and for each one the date it is valid until, or that it has passed that date. If the vehicle is currently out on rent it also shows the rider FIRST NAME and the time the vehicle is due back.

It does NOT show a phone number, a full name, an identity or licence number, the fingerprint of one, an address, the booking, or the amounts. Where a company has published a media address, the three VEHICLE documents can be opened from that page behind a deliberate tap; those are the vehicle papers, not a person documents. The page asks search engines not to index it, and a vehicle belonging to another company returns nothing.

The rider first name and the due time are personal information, shown deliberately and narrowly: they are what makes the page answer the question a checkpoint is actually asking. A company that does not want that published should not put the sticker on the vehicle.

Different information has different clocks, and this policy names no statute for any of them. The obligation to keep business records belongs to the rental company under its own registration, not to us, and the right period depends on that registration — so the company sets it and we hold ourselves to what the software actually does.

Bookings, payments, deposits and refunds

Kept for as long as the rental company must keep its business records under Bangladeshi tax law. The company sets that period; where it has not, we treat it as six years. Financial records are excluded from a deletion request until that period ends — a company cannot erase its way out of its own bookkeeping, and neither can we on its behalf.Stated plainly: a card payment attempt that never became a booking is kept on the same clock, and no scheduled job deletes it earlier. It holds a name, a phone number and an amount, so it is named here rather than left to be discovered — and it is removed on request once it can no longer be the evidence for a payment somebody says they made.

Identity document photographs

Deleted at the return handover that closes the booking, unless the rider is on the company barred list.

Condition and damage photographs

Due for deletion after the company dispute window, sixty days by default, and the due date is written onto the record when the photographs are taken so that shortening the window later cannot retroactively destroy evidence in an open dispute.Stated plainly: the scheduled job that acts on that due date is NOT yet running. Until it ships, a photograph past its date is removed when the company asks. We would rather write this sentence than imply an automatic deletion that does not happen.

The audit log

Not deleted. It is the record of who did what, and a record that can be erased by the person it describes is not a record. It is excluded from erasure requests for that reason.

Technical error reports

Held as one row per distinct fault with a count, not one row per occurrence, and containing no personal information by construction.

Six, and only six. The first three are how the product works at all. The last three reach nothing whatsoever unless a rental company has switched something on — card payment, or an assistant — and a company that never does sends them nothing, ever. Each is named because the product genuinely could not do that part of its job without it, and each is a different kind of exposure.

Meta Platforms — WhatsApp

This product does not send text messages. Every customer enquiry and every reminder leaves as a WhatsApp link, so when a visitor or a staff member taps one, the phone number and the message text are handed to WhatsApp and handled under Meta own terms from that moment. This is the main channel between a rental company and its customers, and it is not optional to how the product works.

Telegram

Owner alerts and the nightly business summary are delivered over Telegram, each company to its own chat. Those messages carry counts and figures — how many vehicles are out, what is overdue — not customer records. Fault alerts about the software go to a separate operator chat and carry no customer information at all.

Cloudflare

The whole platform runs on Cloudflare: the servers that answer requests, the database the records sit in, the storage the photographs sit in, and the network in front of all of it.

SSLCommerz — only where card payment is on

The payment gateway that handles a card or mobile-wallet payment for a rental company that has switched it on. When a renter chooses to pay that way they are handed to the gateway own page along with their name, their mobile number, the amount and a reference for what they are paying for; the card details they type there belong to the gateway and never reach this product. This is the one entry on this list whose agreement is not ours: the merchant account and the terms governing it are the rental company own, and the money settles to that company rather than to us. A company that never turns card payment on sends the gateway nothing, ever.

OpenAI — only where ChatGPT has been connected

A company owner may connect ChatGPT to his own company so that he can ask it what is free, what is overdue and what a number owes — and, where he grants it, so that it can work the counter as well. From the moment he connects it, OpenAI receives whatever an answer to his question contains, and handles it under its own terms. That is: counts, registration numbers, booking numbers and times, a customer name, the name of whoever is riding, a customer mobile number, the words an enquirer sent in, the name and role of a member of your own staff together with when they last signed in, and — where the question touches a barred customer — the reason a staff member wrote when they barred them, which is free text about a named person. It receives nothing else: no identity or licence number, no photograph, no password, and no row belonging to any other company. It is NOT read-only, and it is not one fixed set of abilities either. Permissions are granted one at a time at the moment of connecting, and the assistant may do exactly what was ticked and nothing more: reading the shop is one permission, and making, changing and cancelling a booking, handing a vehicle out and taking it back, recording a payment, adding and editing vehicles, changing prices, barring a customer, and creating a link that hands one customer their own booking confirmation, receipt or dues statement are each a separate one, granted or withheld on its own. THAT LAST ONE IS THE EXCEPTION TO EVERYTHING ELSE ON THIS ROW: the link is a web address that opens that customer’s own document without signing in, so whoever the owner sends it to can read it, it keeps working until it expires, and disconnecting the assistant does not close one that was already created. The owner sends it themselves — nothing in this product sends a message. A note in the enquiry log remains what it always was — it reserves no vehicle and creates no booking.Off until an owner connects it, per company, and it stops at the next request after he disconnects — except a customer share link it already created, which keeps working until it expires.

Anthropic — only where Claude has been connected

The same arrangement, the same permissions and the same limits, for a company owner who connects Claude instead of, or as well as, ChatGPT. It is listed separately rather than folded into a line about assistants in general because a sub-processor disclosure that does not name the company is not a disclosure, and because the two are connected independently: connecting one sends the other nothing.Same switch, same per-company scope, same disconnect.

There is no advertising network, no marketing platform and no analytics vendor in this product, on any surface. Renter information is never sold, never shared for advertising, and never handed to a data broker. The two assistant makers above are the only parties on this list a rental company can add by its own decision, and adding one is a decision it makes as controller — what its customers information is used for is its answer to give, not ours.

On Cloudflare infrastructure, which means the database and the stored files are NOT located in Bangladesh. Information about a Bangladeshi renter therefore leaves the country in the ordinary course of using this service.

This is stated plainly rather than buried because a cross-border transfer that a policy does not mention is exactly the one a regulator asks about later. A rental company that cannot accept it should not put its customers on this platform, and should tell us so before it does.

The Personal Data Protection Act 2023 gives a data subject in Bangladesh the following rights. They apply to a renter, to a staff member, and to a company owner alike — what changes is who answers.

• Access — a copy of what is held about you, and why (section 14).
• Correction — anything inaccurate or incomplete put right (section 15).
• Deletion — erasure of what is held, subject to the record-keeping periods described in section 5 above (section 16).
• Portability — what you gave, handed back in a form another system can read (section 17).
• Objection — the right to object to a particular use of your information (section 18).

A RENTER sends the request to the rental company they booked from — the controller. If that company needs us to act, we act for it, and we will help any company that asks us how. A STAFF MEMBER or a company owner asking about a platform account sends it to us directly.

We answer a request within thirty days. If we must refuse part of one — a financial record inside its retention period, an audit entry — we say which part and why rather than declining the whole request.

Section 22 of the Act requires notification of a personal data breach within seventy-two hours. If a breach affects a rental company data we notify that company without undue delay and in any case within seventy-two hours of becoming aware of it, with what we know, what we do not yet know, and what we are doing about it.

The rental company, as the controller, then notifies its own customers and the authority. We support that notification and will not delay it to finish an investigation first.

The two dates at the top of this page are the record. The effective date moves only when what a rental company agreed to actually changes; the updated date moves whenever the substance of the text does. A change that affects rental companies is notified to them through the console before it takes effect.