Your data,
clearly explained.

Data controller

Rentauras is responsible for the processing of your personal data.

• Rentauras — 10 Rue Liberté, 3rd Floor, Apt 05, Casablanca, Morocco.
• Email: contact@rentauras.com — Phone: +212 713-888620.

Data you give us

• Account: first and last name, email address, phone number, password (stored hashed), language and profile photo.
• Identity verification: national ID card or passport, driving licence, their numbers and expiry dates, and a selfie used to confirm you are the document holder.
• Bookings: car, dates, pickup address, rental contract and your signature, pickup and return photos of the car and any damage, claims and reviews.
• Payments: card payments are handled by our payment provider; we never see or store your full card number. We keep transaction references, amounts, wallet movements, and the bank account (IBAN/RIB) or WafaCash details you give for withdrawals.
• Messages: chat with agencies and with Rentauras support, including photos and locations you choose to send.
• Rental agencies: company details, trade register and licence documents, signature or stamp, fleet and car documents, and bank details for payouts.

Data collected automatically

• Location: your precise location, only when you allow it, to show cars and pickup zones near you and when you share your location in a chat.
• Camera and photos: only when you take or pick a picture (identity documents, selfie, car inspection, chat).
• Device and usage: device model, operating system, app version, language, IP address, push notification token, and crash and error reports.
• Website: cookies needed for sign-in and security; audience and advertising cookies only with your consent through the cookie banner.

Purposes

• Create and secure your account, and verify your identity and driving licence before a rental.
• Process bookings, payments, refunds, wallet top-ups and withdrawals, and agency payouts.
• Compute a trust score from your verified profile and rental history, which sets your security deposit and insurance options. You can ask support to review it.
• Send booking updates and messages by push notification, email, SMS or WhatsApp.
• Handle support requests, claims and disputes.
• Prevent fraud, abuse and security incidents, and meet our legal, tax and accounting obligations.
• Improve the app, fix crashes and measure how the service is used. Marketing messages are only sent with an option to opt out.

Processing on your phone

• Document text recognition and face detection run on your device to help you capture a clear document and selfie. The images leave your phone only when you submit them.

Recipients

We never sell your personal data. We share only what each recipient needs:

• The rental agency for your booking: your name, verified identity and driving licence details, contract and contact details once it accepts the booking.
• Insurance partners, when you take insurance or a claim is opened.
• Payment providers: Payzone (cards) and Binga / WafaCash (cash payments and payouts).
• Technical providers acting on our instructions: Amazon Web Services (hosting and file storage), Google Firebase (push notifications), Sentry (crash reports), Twilio and Infobip (SMS and WhatsApp), and our email provider.
• Public authorities, courts or police when the law requires it.

International transfers

• Some providers above store or process data outside Morocco (for example in the European Union or the United States). These transfers are made under the conditions of Law No. 09-08 and with providers that apply appropriate security measures.

How long we keep data

• Account and profile data: as long as your account is open.
• Identity documents and selfie: as long as your account is open, then deleted unless a legal obligation or an open claim requires us to keep them.
• Booking, invoice and payment records: for the period required by tax and accounting law (up to 10 years).
• Data needed for an open claim, dispute or investigation: until it is closed.
• Security and fraud-prevention logs: up to 12 months.

Access, correction, deletion

Under Law No. 09-08 you can access your data, have it corrected, object to its processing and ask for it to be deleted.

• Edit most of your details directly in the app.
• Delete your account in the app: Profile → Password & Security → Delete Account, or follow the steps at www.rentauras.com/suppression-compte.
• For any other request, email contact@rentauras.com. We answer within 30 days.
• You can also contact the Moroccan data protection authority (CNDP, www.cndp.ma).
• You can withdraw location, camera, photo or notification permissions at any time in your phone settings.

How we protect data

• All data is encrypted in transit (HTTPS).
• Identity documents and car photos are kept in private storage and are only reachable through short-lived links.
• Access is limited to staff and partners who need it for the rental, and staff actions on accounts are logged.

Minimum age

• Rentauras is for adults. You must be at least 18 and hold a valid driving licence to rent a car. We do not knowingly collect data from children.

Updates to this policy

• We may update this policy when the service changes. The date below shows the latest version; for important changes we will notify you in the app or by email.