Privacy policy

RentZ is rental management software made by Raw IT Studio, based in Larnaca, Cyprus. Rental companies (car, scooter, ATV and similar) use it to run bookings, contracts, payments and their fleet.

Customer data of a rental company. When you rent a vehicle from a company that uses RentZ, that rental company decides what data it collects and why. It is the controller. Raw IT Studio stores and processes that data only on the rental company's instructions, as its processor, under a data processing agreement. Questions about your rental data go to the rental company first; we will help them answer.

Data about our own clients. For the accounts of rental company staff, billing, support messages and this website, Raw IT Studio is the controller.

• Staff accounts: name, email, role, sign-in times, and which actions were taken (audit log).
• Renters (entered by the rental company): name, phone, email, address, date of birth, driving licence and ID details and photos, signature, bookings, payments, deposits, damage records and photos, and notes.
• Rental companies: company details, VAT number, bank details for invoices, subscription and referral information.
• Support: the messages you send us and the contact number you give.
• Technical: security logs (IP address, browser, time) kept to protect the service. We do not use advertising or tracking cookies.

• To provide the service a rental company signed up for (contract, Art. 6(1)(b) GDPR).
• To keep invoices and payment records as tax law requires (legal obligation, Art. 6(1)(c)).
• To keep the service secure and prevent abuse (legitimate interests, Art. 6(1)(f)).
• For renters: the rental company's own legal bases, usually the rental contract and its legal obligations.

We never sell personal data and never use renters' data for our own marketing.

Data is stored in data centres in the European Union. We use carefully chosen service providers (sub-processors) for hosting, database and file storage, email delivery and, for subscriptions, payment processing. Each is bound by a data processing agreement. A current list is available on request. If a provider ever processes data outside the EU/EEA, we rely on an adequacy decision or the EU Standard Contractual Clauses.

Encrypted connections, per-company data separation enforced in the database, private file storage with short-lived links, role-based access for staff, an owner lock for financial screens, and an audit log of changes. Rental companies are responsible for who they give accounts to. Optional licence scanning reads photos on the device without sending them to an external OCR service. Staff review the extracted details; captured photos upload to company-private storage when the booking is saved.

Rental companies choose how long to keep renter records within the law. Invoices and accounting records are kept for the period Cypriot tax law requires. When a rental company leaves, we return its data on request and then delete it from the live system, with backups expiring on their normal cycle.

You can ask for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interests. Renters should contact the rental company; we support them. For data we control, write to us using the contact below. We answer within one month.

You can also complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or the authority in your EU country.

If this policy changes in a way that matters, we will tell rental companies in the app before it takes effect. The date at the top shows the latest version.

Raw IT Studio, Larnaca, Cyprus. Phone and WhatsApp +357 96 240342 · rawitstudio.tech. Signed-in users can also use Help & support in the app.