Privacy Policy

1. Information We Collect

Information you provide directly

• Account information: Name, email address, phone number, business name, and billing address when you create an account on any of our products.
• Profile data: Business category, location, description, images, and other details you provide to create listings or configure your account.
• Payment information: Payment method details processed through our third-party payment processors. We do not store complete credit card or bank account numbers on our servers.
• Communications: Messages, support tickets, feedback, and other communications you send to us or through our platforms.
• User content: Articles, reviews, comments, images, and other content you create or upload to our platforms.

Information collected automatically

• Device data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, features used, click patterns, search queries, time spent on pages, and referral sources.
• Location data: Approximate location derived from your IP address. We do not collect precise GPS location without your explicit consent.
• Log data: Server logs including access times, error logs, and API request metadata.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide, maintain, and improve our products and services, including processing transactions and managing your account.
• Personalization: To customize your experience, show relevant listings, and recommend content based on your interests and usage patterns.
• Communication: To send you service updates, billing notifications, security alerts, and — with your consent — marketing communications.
• Analytics: To understand how our products are used, identify trends, measure the effectiveness of features, and make data-driven product decisions.
• Safety and compliance: To detect and prevent fraud, abuse, and violations of our Terms of Use, and to comply with legal obligations.
• Business operations: To manage our internal operations, including accounting, auditing, and legal compliance.

3. Data Sharing

We do not sell your personal data. We may share your information in the following circumstances:

• Between our products: Your basic account information may be shared across Rentablez, RentStorez, and RenTechMag to provide a seamless experience if you use multiple products. You can manage this in your account settings.
• Service providers: We work with third-party vendors for hosting (cloud infrastructure), payment processing, email delivery, analytics, and customer support. These providers are contractually required to protect your data.
• Business partners: On RentStorez, your business profile information (name, location, services, ratings) is publicly visible to customers searching for rental providers. This is core to the marketplace functionality.
• Legal requirements: We may disclose your information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to provide functionality, remember your preferences, and understand how you use our products.

Types of cookies we use

• Essential cookies: Required for core functionality like authentication, session management, and security. Cannot be disabled.
• Functional cookies: Remember your preferences, language settings, and display choices to improve your experience.
• Analytics cookies: Help us understand usage patterns and measure feature performance. We use privacy-focused analytics tools.

We do not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specific retention periods include:

• Account data: Retained for the duration of your account. Upon account deletion, most data is purged within 30 days, except as required by law.
• Transaction records: Retained for 7 years to comply with Indian tax and financial regulations.
• Support communications: Retained for 3 years after the last interaction for quality assurance and dispute resolution.
• Analytics data: Aggregated and anonymized analytics data may be retained indefinitely. Individual-level usage data is retained for 24 months.
• Log data: Server and security logs are retained for 12 months.

6. Your Rights

Under the DPDPA 2023 and other applicable laws, you have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to correction: You can update or correct inaccurate data through your account settings or by contacting us.
• Right to erasure: You can request deletion of your personal data, subject to legal retention requirements.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to grievance redressal: You can raise concerns about our data practices with our Data Protection Officer or with the Data Protection Board of India.
• Right to nominate: You can nominate another person to exercise your data rights in the event of your death or incapacity, as provided under the DPDPA.

To exercise any of these rights, contact us at privacy@squapl.com. We will respond within 30 days.

7. Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Regular security assessments and vulnerability scanning.
• Access controls and role-based permissions for employees and contractors.
• Incident response procedures and breach notification protocols.
• Secure development practices including code reviews and penetration testing.

While we take reasonable precautions, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@squapl.com.

8. Product-Specific Policies

In addition to this general policy, each of our products has specific data practices:

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify registered users via email at least 15 days before the changes take effect.
• Display a prominent notice on our websites and products.

Your continued use of our products after the effective date of the updated policy constitutes your acceptance of the changes.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, you can reach us at:

For privacy-specific concerns, you may also contact our Data Protection Officer at dpo@squapl.com.