Privacy policy

The data controller is [Company name], [registered office address], registered under number [SIREN]. For any question about your data or to exercise your rights: [privacy@viarenty.com]. [Where applicable: a data protection officer (DPO) can be reached at [dpo@viarenty.com].]

Depending on your use of the Platform, we process the following categories:

• Account data: first and last name, email, phone, password (stored hashed), role (Customer/Rental Company).
• Rental Company data (KYB): legal identity, company name, SIREN/SIRET, professional contact details, supporting documents.
• Booking requests: contact details and message sent to the Rental Company, dates and vehicle concerned.
• Reviews: rating and comment published following a rental.
• Rental contract & condition report (optional Rental Company tool): vehicle photographs, mileage, fuel level, damage notes, electronic signature image and the generated contract PDF, produced at the Rental Company's request. This data documents the contractual relationship between the Customer and the Rental Company; Viarenty is never a party to it (see Article 9a of the Terms).
• Billing / subscription data: plan, subscription status, payment identifiers managed by Stripe (we do not store your card numbers).
• Usage data: pages viewed, searches, aggregated and anonymous analytics events (matchmaking counters).
• Technical data: IP address, browser type, security logs, cookies (see section 8).

• Providing the matchmaking service and managing accounts — performance of the contract (art. 6.1.b).
• Verifying Rental Companies and preventing fraud — legitimate interest / legal obligation (art. 6.1.f / 6.1.c).
• Managing subscriptions, billing and collections — performance of the contract / legal obligation.
• Sending transactional emails (confirmations, alerts) — performance of the contract / legitimate interest.
• Marketing communications and search alerts — consent, revocable at any time.
• Improvement, security and anonymous audience measurement — legitimate interest.

Your data is accessible to authorized Viarenty teams and, for Requests, to the relevant Rental Company. We use sub-processors acting solely on our instructions:

• Application hosting: [e.g. Vercel];
• Database and file storage: [e.g. database provider / object storage, located in the EU];
• Subscription payments: Stripe;
• Email delivery: Resend;
• [Where applicable] rate limiting / cache: Upstash.

Where a transfer outside the European Union takes place, it is governed by appropriate safeguards (European Commission standard contractual clauses or an adequacy decision).

• Account data: for the duration of the relationship, then archiving / deletion in accordance with legal deadlines.
• Verification documents (KYB): the period required by applicable regulations.
• Billing data: retained for 10 years under accounting obligations.
• Requests and reviews: the period necessary for the purposes, then anonymization or deletion.
• Condition-report photographs: 12 months from upload, unless the Rental Company flags an ongoing dispute.
• Signed rental contract (PDF) and signature images: 5 years from signing, unless the Rental Company flags an ongoing dispute.
• Technical logs: a limited period for security purposes.

We implement appropriate technical and organizational measures: hashed passwords (bcrypt), encrypted exchanges (HTTPS), role-based access control, logging and rate limiting. As no system is infallible, we cannot guarantee absolute security, but we commit to notifying incidents under the conditions provided by the GDPR.

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set directives regarding the fate of your data after your death. You may withdraw your consent at any time where it constitutes the basis of processing. To exercise these rights, contact [privacy@viarenty.com] (proof of identity may be requested). You also have the right to lodge a complaint with the CNIL (3 place de Fontenoy, 75007 Paris — www.cnil.fr).

Viarenty uses cookies strictly necessary for the site to function (session, authentication, security), exempt from consent, as well as an anonymous audience measurement tool. Any non-essential tracker (third-party audience measurement, marketing) is only set with your consent. You can express, refuse or change your choices at any time via the "Manage cookies" link in the footer, or by configuring your browser.

The Platform is not intended for minors under 15. We do not knowingly collect data relating to minors without the consent of holders of parental authority.

This policy may be updated to reflect legal or technical changes. The applicable version is the one in force when you consult it; substantial changes will be notified.