Privacy Policy & Data Protection Framework

1. Overview and Commitment

EquipmentRentalSoftware.io (“we,” “our,” or “us”), operated by Equipment Rental Software, respects the privacy of our subscribers, their staff, and their commercial equipment rental customers. This Privacy Policy outlines our transparent data practices concerning the collection, storage, protection, and disclosure of information gathered through our web platform and services.

2. Categories of Information We Collect

To provide equipment inventory, reservations, customer verification, and accounting synchronization, we collect the following types of information:

• Account Credentials: Name, work email address, company name, telephone number, depot address, and administrative login credentials.
• Rental Customer & Contractor Records: Contact details, authorized driver/operator names, driver license identification numbers, certificates of liability insurance, and digital signature records.
• Equipment & Telematics Data: Machine serial numbers, VINs, GPS locations, engine hours, maintenance history, inspection photographs, and operational status logs.
• Billing & Payment Tokens: Payment transactions and security deposit holds are processed through PCI-DSS Level 1 certified gateways (e.g., Stripe). We store tokenized payment methods; raw credit card numbers never touch our servers.

3. Purpose and Legal Grounds for Processing

We process collected data exclusively for legitimate business and operational requirements:

• Facilitating reservation scheduling, check-in, and check-out workflows.
• Generating accurate rental contracts, invoices, and accounting ledger synchronization.
• Enforcing automated preventative maintenance reminders to safeguard equipment safety.
• Securing deposits and managing loss prevention in the event of equipment damage or late returns.
• Complying with statutory tax, occupational safety, and financial record-keeping laws.

4. Data Security and Infrastructure Safeguards

We maintain SOC2 Type II certified standards. All web traffic is strictly encrypted using Transport Layer Security (TLS 1.3). Data at rest is encrypted using military-grade AES-256 encryption. We implement continuous vulnerability scanning, role-based access control (RBAC), and automated multi-region daily backups.

5. Third-Party Processors and Integrations

We never sell, rent, or trade your operational data to marketing brokers. Data is transmitted only to verified sub-processors required to deliver our core SaaS functionality:

• Cloud Hosting & Edge Delivery: Vercel and AWS global edge infrastructure.
• Payment Processing: Stripe (PCI-DSS Level 1 certified).
• Accounting Synchronization: Intuit QuickBooks Online and Xero (upon user configuration).
• Transactional Notifications: SendGrid and Twilio for SMS/email booking confirmations.

6. Data Retention and Your Rights

You maintain ownership of your fleet and customer data. In accordance with applicable data protection legislation (including GDPR and CCPA), you may request a full export of your equipment data in JSON or CSV format, request corrections, or request complete account deletion at any time.

7. Data Protection Contact

If you have any questions or data access requests regarding this Privacy Policy, please contact our designated privacy compliance officer: