Privacy policy
How RENTLI handles your information · Version 1, updated 27 September 2026
1. What this covers
This policy describes how RENTLI collects, uses, stores, shares and protects personal information on this platform. It should be read together with the Terms and conditions and with the lease agreement generated for each booking. It applies to everyone who uses the site: people browsing cars, guests who book them, and hosts who list them.
2. What we collect
Account and contact information: your name, mobile number, email address, sign-in details and the messages you send us. Verification information: Aadhaar-related information, your driving licence, a selfie, and your date of birth for the age check. Host and vehicle information: the registration certificate, insurance, ownership or authorisation documents, photographs of the car, its registration number, payout bank details and the listing itself. Booking information: the booking reference, the car, dates, location, host and guest, price, fees, payment status and history. Condition and incident records: photographs, video, odometer readings, and records of damage, accidents, theft, recovery and disputes. Communications: chat and support messages, and support call records where that is lawful. Payment and technical information: transaction details, refunds, chargebacks, and device, log and security information.
3. What it is used for
Creating and managing your account. Verifying your identity and your eligibility to drive. Taking payment and processing refunds. Generating the electronic lease agreement for each booking. Connecting a host and a guest so a booking can happen. Managing the security deposit and any challan claim against it. Preventing fraud and keeping the platform secure. Holding the condition record so that a damage question can be settled between the two people involved. Coordinating theft and recovery where that arises. Meeting insurance and legal obligations. Providing support, and understanding how the site is used so it can be improved.
4. Verification, Aadhaar and your licence
A licence is required because you are being handed a car and the law requires whoever drives it to be licensed for it; an Aadhaar and a selfie are required because a host is handing a stranger a vehicle worth several lakh rupees and needs to know the person is who they say they are. RENTLI processes Aadhaar-related information only where it is lawful and reasonably necessary for identity verification, safety, fraud prevention, recovery, dispute handling and legal compliance, and may verify documents through authorised providers. We collect the minimum needed for those purposes. Your documents are stored in private storage, not alongside public listing images, and are not shown to your host.
5. What a host and a guest see about each other
A host is shown what is reasonably necessary for the booking: the guest’s name, the booking details, and the fact that verification has passed. A host is not shown the guest’s licence, Aadhaar, selfie or date of birth. A guest is shown the host’s name, the booking details and the information about the car. Contact details are not exchanged between you outside the booking; messages go through the platform. RENTLI does not routinely disclose personal information beyond what a booking requires.
6. The services we use to run this
Netlify hosts the website. Supabase provides sign-in, the database and file storage, and is where your documents and condition photographs are kept. Razorpay takes payment. Google Analytics counts how the site is used. Google Maps loads on the pages that show a pickup point. MSG91 sends the WhatsApp and SMS messages about your booking. Each of these processes the information needed for its part, including technical request information, under its own terms and under contractual safeguards. Information may also be shared, where necessary and lawful, with verification providers, communication and security providers, recovery services, insurers and professional advisers.
7. When we have to tell someone else
Relevant information may be disclosed to the police, a court, a government or statutory authority, an insurer, recovery personnel or legal advisers where the law requires it, where the law permits it, or where it is reasonably necessary for safety, fraud prevention, recovery, investigation or enforcement. A traffic challan, a stolen car and an accident claim all involve somebody outside this platform, and the information needed for those goes to them.
8. Location and tracking
A tracking device fitted to a car belongs to the host and is managed by the host, not by RENTLI. We do not run our own GPS system and do not continuously track guests. We may access relevant location information for a booking, or for safety, theft, recovery, fraud, insurance, dispute or legal purposes, subject to law. A host’s tracking should stop when the booking ends, except where it remains necessary for an ongoing matter. Pickup locations and addresses you enter are used for your booking. Browsing cars on this site does not require continuous device-location access.
9. How long it is kept
Verification documents, booking history, payment records, condition photographs and video, chats, call records and related records are kept for as long as is reasonably necessary for operations, for challans and legal notices that arrive later — and traffic challans in India frequently arrive weeks after a trip — and for fraud prevention, disputes, recovery, insurance, accounting and legal compliance. Final retention periods are being fixed with counsel and will be published here once they are settled.
10. Keeping it secure
RENTLI applies reasonable technical and organisational safeguards: documents are held in private storage rather than public buckets, access is restricted by role, and the database enforces those restrictions at row level rather than relying on the application to remember. No electronic system can guarantee absolute security. Keep your password private, never share an OTP with anyone including someone claiming to be from RENTLI, sign out on shared devices, and tell support at once if you think your account has been compromised.
11. If something goes wrong with data
If a personal-data incident occurs, RENTLI will investigate it, contain it, mitigate the effect, and give whatever notifications or take whatever other steps applicable law requires — including notifying you and the relevant authority where that is required.
12. Your rights over your information
Subject to applicable law you may have the right to ask what we hold about you, to have it corrected, to have it deleted, to withdraw consent, and to have a grievance heard. Contact support to make any of these requests. We will need to verify who you are before acting on one, and some requests are subject to lawful exceptions and to the retention duties described at clause 9 — for example we cannot delete the record of a booking while a challan claim or a dispute on it is open.
13. Closing your account
You can ask support to close and delete your account. We may retain information that is required for law, accounting, security, fraud prevention, an unresolved dispute, recovery, insurance or enforcement. Anything not covered by one of those is removed.
14. Messages and marketing
Messages about your own booking — confirmation, pickup, return, the deposit, payment and anything about safety or the law — will continue for as long as you have a booking with us, because they are part of the service rather than marketing. Promotional messages are sent only where the law permits and with the controls it requires, and you can opt out of those at any time through support without affecting anything about your booking.
15. Cookies, analytics and what your browser keeps
RENTLI runs no advertising cookies and no tracking pixel: there is nothing here following you around other websites to sell you something. It does use Google Analytics to count how the site is used — which pages are opened, which cars are looked at, how many bookings are completed — so we can see what is working and what is broken. What is sent is what happened, never who it happened to: no name, no email address, no phone number and no document is ever included, and nothing that would let anyone work out who you are. If you would rather not be counted at all, any ad blocker or Google’s own opt-out browser add-on stops it, and nothing on this site stops working if you do. What this site stores in your browser is what it needs to work: your sign-in session, your saved cars, a referral code waiting to be applied, and what your account page looked like last time so it does not rearrange itself while loading. You can clear all of it through your browser settings, which will sign you out and forget your saved cars. Two outside services load code on the pages that need them and may set storage of their own under their own privacy notices: Razorpay, when you pay, and Google Maps, on the pages that show a pickup point. In the RENTLI app the same counting is done with Google Analytics for Firebase: which screens are opened, and whether a search, a booking or a check-in was completed, on the same terms as above — what happened, never who it happened to, with no name, email address, phone number or document ever included. The app does not use the advertising identifier and does not follow you across other apps or websites. The app also asks your phone for permission to send you notifications about your own bookings, to use the camera and photo library when you add a document or photograph, and to use your location while the app is open to show how far a car is; each can be switched off in your phone’s settings.
16. Links to other sites
Where this site links to somewhere else — an insurer, a payment provider, a government portal for checking a challan — that site has its own terms and its own privacy practices, and RENTLI is not responsible for them.
17. Age
This service is for people aged 21 and over. The minimum age is checked before documents are uploaded and enforced in the database. RENTLI does not knowingly provide booking access to anyone below it, and an account found to belong to someone underage is closed.
18. Contact and grievances
For anything about privacy — a question, a request to access, correct or delete information, or a complaint — use Help and support, or write to support@rentli.co.in. RENTLI’s grievance officer is Faiz Momin, reachable at support@rentli.co.in. We will acknowledge a privacy grievance and respond within the period applicable law requires. RENTLI’s registered office details will be published on this page once the company’s registration formalities are complete; until then support is the route, and every privacy request reaches the same people.
19. Changes to this policy
RENTLI may update this policy as the platform, its practices or the law change. The version and date at the top of this page tell you which one you are reading. Where a change is material, we will tell you, and will ask for your consent where the law requires it.
A note on this document
This policy was prepared from RENTLI’s business rules and is under review by Indian counsel, who are considering data-protection classification, retention periods, the lawful basis for processing Aadhaar-related information, and grievance-redressal requirements. Two items are outstanding and are marked as such above: the final retention schedule at clause 9, and the registered office at clause 18.