1. Who we are

RentHub is a car rental management platform built specifically for car rental agencies in Morocco. The platform provides comprehensive tools for managing fleet, bookings, clients, contracts, insurance, and oil changes — all from a unified, easy-to-use interface. We are committed to protecting your personal data with the highest standards of security and transparency.

2. Data controller

The controller responsible for processing your personal data is:

Trade name: RentHub
Activity: Car rental management platform
Country: Kingdom of Morocco
Email: contact@renthub.rentals
Website: renthub.rentals

For any inquiry regarding the protection of your data or to exercise your rights, you may contact us directly at the email address above.

3. Data we collect

We collect only the data necessary to operate and improve the service, categorised as follows:

a. Account data

When creating an account or receiving an invitation to join the platform: full name, email address, phone number, company name / agency name, role (manager, agent, admin).

b. Usage data

Data automatically generated when using the platform: login and logout times, features used, activity logs (audit logs), IP address, browser type and version.

c. Vehicle and booking data

Data entered by managers and agents on the platform: vehicle information (licence plate, make, model), booking and contract data, client data (name, national ID number, driving licence number, phone number), insurance and oil change data.

d. Technical data

Browser type and operating system, device type (desktop / mobile / tablet), screen resolution, preferred language, IP address.

4. Legal basis for processing

Our processing of your data is based on the following legal grounds under Moroccan Law 09-08 and the GDPR:

Contract performance: Processing data necessary to provide the service you have subscribed to.
Legal obligations: Retaining certain data for specified periods under Moroccan law (invoices, records).
Legitimate interests: Improving platform security, fraud prevention, and service performance analysis.
Consent: In cases where we request your explicit consent, such as sending newsletters.

5. How we use your data

We use your data exclusively for the following purposes:

Service operation: Creating and managing your account and verifying your identity at each login.
Feature delivery: Enabling you to manage fleet, bookings, clients, and contracts.
Communication: Sending important alerts (insurance expiry, oil change due, service updates).
Technical support: Responding to support requests and resolving technical issues.
Platform improvement: Analysing usage patterns (in aggregate and anonymised form) to develop features and fix bugs.
Security and compliance: Detecting unusual activity, preventing fraud, and complying with legal requirements.

We do not use your data for advertising purposes and never sell it to third parties under any circumstances.

6. Data sharing with third parties

We do not sell or rent your personal data. We work with third-party vendors who process data on our behalf under strict data processing agreements that guarantee the security of your data:

Service	Vendor	Purpose	Country
Hosting and infrastructure	OVH / OVHcloud	Data storage and server operation	Morocco / Europe
Email delivery	Mailtrap	Sending transactional emails to users	European Union
Authentication and identity management	Keycloak (self-hosted)	User identity verification and session management	Our own servers

If you manage your agency as a platform user, you are considered the controller of the data you enter (your clients' data), while we act as the processor.

7. International data transfers

Some of your data may be processed by service providers within the European Union (OVH, Mailtrap). The EU provides an adequate level of data protection. We ensure that adequate contractual safeguards are in place for all data transfers in accordance with the requirements of Law 09-08.

8. Security measures

We implement a comprehensive set of technical and organisational measures to protect your data:

Encryption in transit: All communications are encrypted using TLS 1.2 or higher (HTTPS).
JWT tokens: Use of secure session tokens — passwords are never stored on the server.
Role-based access control (RBAC): Each user only accesses data related to their agency according to their permissions.
Audit logs: All sensitive operations are logged for review when needed.
Database encryption: Stored data is protected against unauthorised access.
Security updates: Regular application of security patches to all infrastructure components.

9. Data retention

Data type	Retention period
Account data (name, email)	Duration of active subscription + 12 months after termination
Usage data and activity logs	12 months from the date of recording
Vehicle, booking, and contract data	Duration of active subscription + 12 months
Invoices and accounting records	5 years (legal obligation)
Security logs (IP, login attempts)	90 days

After retention periods expire, data is permanently deleted or anonymised. You may request early deletion at any time.

10. Your rights

Under Moroccan Law 09-08 and the GDPR, you have the following rights:

Right of access: Request a copy of all data we process about you.
Right of rectification: Correct inaccurate or incomplete data.
Right of erasure ("right to be forgotten"): Request deletion of your data when the legal basis for processing it has ended.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing of your data for legitimate interests purposes.
Right to restriction of processing: Request temporary suspension of processing in certain cases.

To exercise any of these rights, email us at contact@renthub.rentals clearly stating your request. We will respond within 30 days.

11. Cookies

For full details about our use of cookies on both sites (renthub.rentals and app.renthub.rentals), please refer to our Cookie Policy.

12. Children's data

The RentHub platform is intended exclusively for businesses and adult professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately.

13. Changes to this policy

We may update this policy periodically to keep pace with legal or technical changes. In the event of significant changes, we will notify you by email to your registered address or via a prominent notice on the platform at least 30 days before the changes take effect. We encourage you to review this policy regularly.

14. Contact / DPO

For any privacy-related inquiry or to exercise your rights:

Email: contact@renthub.rentals
Website: renthub.rentals

We will endeavour to respond to your request as soon as possible, and within 30 days at the latest.