Privacy Policy

The data controller is CONNECTIVE S.L. (Paseo del Born 12, 07012 Palma de Mallorca, Spain), contactable at info@rentus.app. If we appoint a Data Protection Officer, their contact details will be published here.

• Account data — name, email, phone, password (hashed), profile photo, role (renter/operator).
• Operator data — business name, tax ID, address, listings, payout (Stripe) details.
• Booking data — items booked, dates, prices, messages, guest details, licence attestations.
• Payment data — processed by Stripe; we receive limited details (e.g. last 4 digits, status, fees). We do not store full card numbers.
• Communications — messages between users, and with our support.
• Technical & usage data — IP address, device/browser, pages viewed, and cookies/analytics.
• Location data — the location of listings and ports (not your live device location).

• To provide the Platform and process bookings — performance of a contract (Art. 6(1)(b)).
• To process payments and pay out operators — contract and legal obligation (Art. 6(1)(b),(c)).
• To comply with tax, accounting and legal duties — legal obligation (Art. 6(1)(c)).
• To prevent fraud and keep the Platform secure — legitimate interests (Art. 6(1)(f)).
• To improve and analyse the Platform — legitimate interests and/or consent (Art. 6(1)(f),(a)).
• To send service messages — contract; marketing only with your consent (Art. 6(1)(a)).

We share personal data only as needed, with:

• Other users — renters and operators see the booking details necessary to fulfil a booking.
• Stripe — payment processing and payouts (Stripe Connect).
• Vercel — website hosting and analytics.
• Neon — managed database hosting.
• Resend / Amazon SES — transactional email delivery.
• Cloudinary — image hosting for listing photos.
• Google — sign-in and workspace email, where used.
• Authorities, advisors and acquirers — where required by law or in a corporate transaction.

These providers act as our processors under appropriate data-processing agreements, except where they are independent controllers (e.g. Stripe for payment compliance).

Some providers (e.g. Stripe, Vercel) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or adequacy decisions.

We keep personal data only as long as necessary for the purposes above. Account data is kept while your account is active; booking, payment and invoicing records are kept for the periods required by Spanish tax and commercial law (generally up to 6 years); other data is deleted or anonymised when no longer needed.

Subject to applicable law, you have the right to:

• access your personal data and obtain a copy;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict or object to processing, including profiling;
• data portability;
• withdraw consent at any time (without affecting prior processing); and
• lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es) or your local authority.

To exercise any right, email info@rentus.app. We may need to verify your identity.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and use of reputable processors. No system is perfectly secure; please keep your password confidential.

The Platform is intended for users aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email, and the “last updated” date above will change.

For any privacy matter, contact info@rentus.app.