Last updated: March 2026
1. Introduction
OreGO Rentals LLC ("we," "us," "our") respects your privacy. This policy explains how we collect, use, disclose, and protect personal information when you use oregorentals.com and our services.
2. Information We Collect
Information you provide:
- Account information: name, email, phone number, date of birth
- Identity verification: driver's license (front/back images), facial verification photo via Stripe Identity
- Payment information: credit/debit card details (processed and stored by Stripe, not on our servers)
- Booking information: rental dates, locations, vehicle preferences, special requests
- Communications: messages with our support team and hosts, reviews, feedback
- Promo/referral codes used
Information collected automatically:
- Device information: IP address, browser type, operating system, device identifiers
- Usage data: pages visited, features used, booking flow interactions, search queries
- Location data: approximate location based on IP address (we do not track real-time location via your device)
- Cookies and similar technologies: see our Cookie Policy
Information from third parties:
- Stripe: payment confirmation, identity verification results, fraud detection signals
- Google Analytics: anonymized website usage patterns
- Social media: if you log in via Google or other social providers, we receive your basic profile information
3. How We Use Your Information
- Process and manage vehicle rentals and payments
- Verify your identity and driving eligibility (legal requirement for vehicle rental in Oregon)
- Communicate about bookings: confirmations, reminders, pickup instructions, receipts
- Provide customer support
- Process damage claims and insurance matters
- Improve our services, website, and user experience
- Detect and prevent fraud, unauthorized access, and illegal activity
- Comply with legal obligations (tax reporting, law enforcement requests, insurance requirements)
- Send promotional communications (only with your opt-in consent; unsubscribe at any time)
- Conduct analytics and business intelligence (using aggregated, anonymized data)
4. Legal Bases for Processing
- Contract performance: processing your rental bookings and payments
- Legal obligation: identity verification, tax reporting, law enforcement compliance
- Legitimate interest: fraud prevention, service improvement, analytics
- Consent: marketing communications, non-essential cookies
5. Information Sharing
We do NOT sell your personal data. We share information only with:
- Stripe: payment processing, identity verification, fraud prevention
- Google: anonymized analytics (Google Analytics)
- Insurance providers: when processing damage/accident claims
- Law enforcement: when required by law, subpoena, or court order
- Service providers: hosting (Vercel), email services — under strict data processing agreements
- Vehicle hosts: limited booking information (name, pickup time, contact) necessary to fulfill the rental
6. Data Retention
- Account data: retained while your account is active, plus 3 years after deletion request (legal/tax requirements)
- Booking records: 7 years (Oregon tax/business record requirements)
- Identity verification documents: retained for 3 years after last rental, or as required by law
- Payment records: retained by Stripe per their retention policy
- Analytics data: 26 months (Google Analytics default)
- Communications/messages: 3 years after last activity
7. Data Security
- All data transmitted via TLS 1.3 encryption
- Payment data processed by PCI DSS Level 1 compliant Stripe
- Identity documents encrypted at rest
- Access controls: role-based access, principle of least privilege
- Regular security audits and vulnerability assessments
- Incident response plan in place for data breaches
8. Your Rights
Under applicable law (including Oregon Consumer Information Protection Act), you have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Portability: Request your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
- Restrict processing: Request limitation of data processing in certain circumstances
To exercise these rights, email admin@oregorentals.com with subject line "Privacy Request." We will respond within 30 days.
9. Children's Privacy
Our services are not directed to individuals under 21 (the minimum rental age). We do not knowingly collect data from minors. If we learn we have collected data from someone under 18, we will delete it immediately.
10. California Residents (CCPA)
If you are a California resident, you have additional rights under the CCPA, including the right to know what data we collect and share, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information. Contact us to exercise your rights.
11. International Users
Our services are operated in the United States. If you access our services from outside the U.S., your data will be transferred to and processed in the United States. By using our services, you consent to this transfer.
12. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via email to registered users and posted on this page with an updated effective date.