Privacy Policy

Last updated Oct 15, 2026

This policy explains what personal data Rento collects when you use our website and our apps, why we hold it, who else sees it, and what you can do about it. It also covers people who never use Rento themselves but are named as the second driver on someone else’s booking (see “Second drivers”).

It is written to be read. If anything here is unclear, write to us and we will explain it in plain words.

1. Who we are

Rento is operated by Rento24 GADI SH.P.K., a company registered in the Republic of Kosovo. We are the controller of the personal data described in this policy.

You can reach us about anything in this policy at info@rento-ks.com. For help with a booking, info@rento-ks.com reaches the support desk faster.

2. Our role, and the rental company’s

Rento is a marketplace. You book a car through us, but the car is rented to you by an independent rental company, and the rental agreement is between you and that company.

That means two organisations handle your data for different reasons. We handle it to run the platform: your account, the booking, the payment you make online, the messages you send, and the checks a company asks us to make. The rental company handles it to rent you a car: they decide what to do with the details we pass to them, and their own privacy terms apply to that. If you want a company to erase what it holds about you, ask that company.

3. What we collect

We collect only what a booking, an account and the law require.

Your account: Name, email address, phone number, the language you chose, and — if you signed up with a password — an encrypted form of that password from which the password cannot be read. If you sign in with Google or Apple we receive an account identifier, your email address and your name; from Google we may also receive your profile picture. If you use Apple’s “Hide My Email”, we only ever see the forwarding address Apple gives us.
Bookings: The car, the dates and times, the pick-up point, any extras, anything you write in the notes, and the price. If you book without an account we hold the name, email address and phone number you type, plus a secret link that lets you open that booking again.
Payments: Card payments are taken by our payment provider, not by us. We never see or store your card number. We store the amount, the currency, the status of the payment, and the provider’s reference for it. Your email address is passed to the provider so it can send you a receipt.
Identity verification: Some rental companies require a verified renter. If you choose to verify, we collect photographs of your identity document and driving licence and a selfie, and the details read from them: your name, date of birth, document numbers, licence categories and expiry, and your address. Our server compares the selfie with the document photograph to check they are the same person, and checks the photo is of a live person. Those comparisons happen on our own server and produce only a score — no face template is kept. We ask for your separate, explicit consent before this happens, because it is biometric data. To save you typing your details, and to check the ones you type, our own server reads the machine-readable lines on your ID card or passport itself wherever it can. Photographs it cannot read, and your driving licence, may be read by an AI service, Anthropic (see “Who else sees it”), with the face on the document blacked out first; your selfie is never sent to it. What is read can never approve a verification on its own. If it disagrees with what you typed, a person at Rento looks at your verification. The one exception is a document that shows you are under 18: that verification is refused (see “Children”).
A second driver: If your booking includes a second driver, we collect their full name, date of birth, driving licence number, the country that issued the licence and the date it is valid until, and photographs of the front and the back of their licence. You provide these on their behalf, or the rental company enters them at its counter, so you must have the driver’s permission first and should point them to this policy. What happens to their data is explained under “Second drivers”.
Phone confirmation: We send a code to your phone number to confirm it works, because the rental company phones you to arrange the handover. The code is delivered over WhatsApp or by text message.
Messages, support and reviews: The messages you exchange with a rental company and any pictures or documents you attach, the support requests you send us and their attachments, and any review you write after a rental.
Photos at handover: When the car is handed over or returned, photographs may be taken of the vehicle and its condition. These can show the surroundings and the number plate.
Rental agreements: If the company prepares a rental agreement through Rento, it contains your name and contact details and — where verification data is used to fill it — your identity document number, licence details, date of birth and address. If a second driver is named, it also contains their name, date of birth and licence details — never the photographs of their licence. Agreements are signed electronically through a signing service we run on our own server.
Device and usage information: Our servers log the IP address, the browser or app version and the time of requests. In the apps we store a notification token so we can send you booking notifications. We also count searches and car views to understand what people look for; those records carry a short-lived value derived from your IP address and browser rather than your name, and are not linked to your account.

4. Why we use it, and on what basis

To provide what you asked for — creating your account, taking and confirming a booking, passing it to the rental company, taking the payment, carrying your messages, preparing an agreement. This is necessary to perform our contract with you.
To keep the platform safe and working — preventing fraud and abuse, confirming a phone number is real, keeping logs, fixing faults, and answering support requests. This is our legitimate interest in running a service people can trust.
To verify identity where a rental company requires it. We do this on the basis of your explicit consent for the biometric part, which you may withdraw at any time by deleting your verification in the app or on the website.
To let the rental company check a second driver’s licence before it hands over the car, and to name that driver on the rental agreement. This is necessary to perform the rental you booked, which includes them, and it is in the rental company’s and our legitimate interest that only a person with a valid licence drives the car.
To meet legal obligations — above all accounting and tax records of payments taken.
To send you service messages about your bookings by email and, if you allow notifications, to your phone. We do not send marketing emails and we do not sell data to anyone.

5. Who else sees it

The rental company you book with sees what it needs to hand you a car: your name, email address and phone number, the booking, anything you wrote in the notes, and your messages with them. If you are a verified renter it also sees that you are verified, the country and categories of your licence, how long you have held it, an age band rather than your date of birth, and whether the name matches — never your documents.

A second driver is the exception: the rental company sees their details and the photographs of their licence, because checking that licence before handover is the reason they are collected (see “Second drivers”).

A company can ask to see more of your identity details after an incident such as an accident or a theft. That request has to state a reason, a Rento administrator has to approve it, the access expires and is limited to a set number of views, and we email you when it is granted.

We use a small number of service providers, who act on our instructions and may not use your data for their own purposes:

Supabase: Our database, file storage and live updates.
Hetzner Online GmbH (Germany): The servers that run our API and our document-signing service.
Grafana Labs (data stored in Germany): Monitoring of our servers. Receives our server logs, which can include your account ID and IP address.
Vercel: Hosting for this website and the company dashboard.
Paysera (Lithuania): Card and bank payments. Receives the amount, the booking description and your email address.
Twilio (United States) and WhatsApp / Meta (Ireland, United States): Delivery of the code that confirms your phone number.
Anthropic (United States): When you verify, reads the text on your driving licence, and on an identity document our own server could not read. It receives a reduced-size copy of those photographs, with the face blacked out and nothing that links them to your account — never your selfie. It also checks the car photos rental companies upload for their listings.
Mailgun: Delivery of our emails. Receives the address and the content of the message.
Google: Sign in with Google, and notifications to Android phones.
Apple: Sign in with Apple, and notifications to iPhones.
OpenStreetMap Foundation: Map tiles, and turning your location into an address when you press “Use my current location” on our website or in our apps. Your IP address reaches them when a map is shown; your coordinates only when you press that button, and they are not sent to us.
komoot (Germany): Address suggestions on our website and in our apps (Photon, built on OpenStreetMap data). Receives what you type into an address field, and your IP address.

We also disclose data where the law requires it — for example to a court, the tax authority or the police acting on a lawful request — and to our professional advisers where needed to establish or defend a legal claim.

6. Where your data is held

Our API and signing servers are in the European Union. Our database, storage, website hosting, email, notification, payment and document-reading providers are companies established in the European Economic Area or the United States, and some of them process data outside Kosovo.

Where data leaves Kosovo or the European Economic Area, it is protected by the transfer safeguards in our contracts with those providers — as a rule the European Commission’s standard contractual clauses.

7. How long we keep it

Your account and its details: until you delete your account.
Identity documents — the photographs of your ID, licence and selfie, and what was read from them: 24 months from verification, then deleted automatically. A submission we reject is deleted straight away, and you can delete your verification yourself at any time.
Photographs of a second driver’s licence: 30 days after the booking’s return date, then deleted automatically — straight away if the booking is cancelled or declined. The driver’s typed details stay with the booking and the rental agreement.
A confirmation that your phone number was checked: 4 months, after which we ask again.
Bookings, payments and rental agreements: kept as records of a rental that happened, including for the accounting and tax periods the law requires. If you delete your account these stay with the rental company as its record, with your email address, phone number and the link to your account removed.
Messages with a rental company and support requests: until you delete your account.
Search and car-view records: up to 400 days. They are not linked to your account.
Server logs: roughly 90 days.
Backups of the signing service: 7 days.

When you delete your account we also keep, and cannot delete, a record of which documents were accessed and when — that record is what makes access to identity documents auditable, and it identifies the account only by a number that no longer maps to a person.

8. Your rights

Ask for a copy of the personal data we hold about you.
Have inaccurate data corrected — most of it you can edit yourself in Account.
Delete your account, and with it everything described under “How long we keep it”. In the apps this is Account → Delete account; on the website it is in your account settings; or write to us.
Withdraw a consent you gave, including consent to the biometric check, without affecting what was done before you withdrew it.
Object to processing we carry out on the basis of our legitimate interests, and ask us to restrict processing while a dispute is looked at.
Receive the data you gave us in a machine-readable form, or have it sent to another provider where that is technically possible.

Write to info@rento-ks.com and we will answer within 30 days. There is no charge. We may ask you to confirm who you are before we act, because these rights are worth nothing if anyone can use them on your behalf.

If you think we have handled your data badly, please tell us first — we would rather fix it. You can also complain to the Information and Privacy Agency of the Republic of Kosovo, and if you live in the European Union, to your national data-protection authority.

9. How we protect it

Everything travels over encrypted connections. Identity documents, and the photographs of a second driver’s licence, are encrypted individually before they are stored, with a key that is itself encrypted, so the files are useless on their own. Access to them is limited, logged, and shown to you on request. Passwords are stored in a form that cannot be reversed. The database enforces, row by row, who may read what — a rental company can only ever reach its own bookings.

No system is perfect. If a breach ever puts you at risk, we will tell you and the supervisory authority as the law requires.

10. Cookies

We use only the cookies the site needs to work. There are no advertising cookies, no analytics cookies, and no third-party trackers on our website.

rento_at, rento_rt: Keep you signed in. The first lasts an hour, the second 60 days or until you sign out.
NEXT_LOCALE: Remembers the language you chose.
rento_agency, rento_sidebar: In the company dashboard only: which company you are working as, and whether the menu is open.
rento_oauth: Set for a few minutes while you sign in with Google or Apple, so we can bring you back to the right place.

Our apps and website also keep some information on your own device — a draft booking, your language, and the files you have opened in a chat — which never leaves the device and is cleared when you sign out.

11. Children

Rento is not for children. You must be at least 18 to have an account, and identity verification refuses anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.

12. Second drivers

This section is for someone who has not booked with Rento but was named as the second driver on another person’s booking. If that is you, this is what we hold about you, and why.

What we hold: Your full name, date of birth, driving licence number, the country that issued your licence and the date it is valid until, and photographs of the front and the back of your licence — which also show your photograph, your signature and anything else printed on it. We hold no email address or phone number for you, and no account is created for you.
Where it came from: The person who made the booking gave it to us, or the rental company entered it at its counter. They need your permission to do so.
Why we hold it: So the rental company can check your licence before it hands over the car, and so the rental agreement names you as a driver. We rely on the rental the booking person made, which includes you as a driver, and on the rental company’s and our legitimate interest in making sure that only someone with a valid licence drives the car.
Who sees it: The rental company handling the booking, the person who made the booking, and Rento administrators where that is needed to run or support the booking. Every time the rental company or a Rento administrator opens your licence photographs, it is recorded. Your typed details are printed on the rental agreement that the person who booked and the rental company sign; the photographs are not. Our database and hosting providers (see “Who else sees it”) store and process the data on our instructions. No AI service or other provider reads your licence.
How it is protected: Your licence photographs are kept in the same encrypted store as renters’ identity documents. Location and other hidden data are removed from each photo file, each one is encrypted on its own before it is stored, and only our own server hands it out, to someone entitled to see it — never as a link.
How long we keep it: The photographs are deleted automatically 30 days after the booking’s return date, and straight away if the booking is cancelled or declined. Your typed details stay with the booking and on the rental agreement, which are kept as the record of the rental (see “How long we keep it”). The record of who opened the photographs is kept as well, because it is what makes that access auditable.
Your rights: You have the same rights as anyone else (see “Your rights”), and you can use them yourself, without the person who made the booking: write to info@rento-ks.com. If the rental company keeps its own copy of anything it saw, such as the signed agreement, that copy is its record and its own privacy terms apply; ask the company about it directly.

13. Changes to this policy

When we change this policy we update the date at the top. If a change materially affects you — a new purpose, a new recipient — we will tell you by email or in the app before it takes effect.

14. Contact

Rento24 GADI SH.P.K., business number (NUI) 812457390. Email info@rento-ks.com.