Privacy Notice

Effective September 16, 2026 · Uprentals / UPRNTLS

Uprentals collects only the information reasonably needed to evaluate rental requests, verify renters, operate equipment rentals, document payments and handovers, prevent fraud or misuse, and resolve legitimate rental concerns. Sensitive renter documents are kept in private storage and are not intended for public access.

Who handles your information

Uprentals is the operator of the UPRNTLS rental service and acts as the business responsible for the renter information submitted through this website and its rental operations.

Before public launch, Uprentals should publish at least one current privacy contact in the CRM business settings.

Information we may collect

Depending on the rental transaction, this may include your name, mobile number, email address, address, rental purpose, booking dates and equipment, Primary ID, Secondary ID, Proof of Billing, selfie with ID, electronic signature, payment and deposit records, release/return photos, incident records, and communication history related to the booking.

Why we use it

• to receive, review, approve, reject, reschedule, extend, release, return, and close rental bookings;
• to verify renter identity and submitted requirements;
• to calculate rental charges, deposits, logistics, late fees, damage or settlement amounts;
• to create rental agreements, receipts, operational records, reminders, and customer updates;
• to protect customers, rental equipment, and the business from fraud, loss, misuse, disputes, or unauthorized access; and
• to comply with applicable accounting, tax, recordkeeping, legal, or regulatory obligations.

Booking drafts and private status links

Booking drafts are session-only by default and expire after one hour. If you explicitly choose Remember my booking draft, the draft may remain on that device for up to 24 hours. Uploaded ID files are not stored in the booking draft and must be selected again. Private booking-status links are also session-only by default; they are stored on the device for up to 24 hours only if you explicitly choose to remember the booking. The server also expires private status-link access after a booking is closed according to the Uprentals retention setting. Anyone with a still-valid complete private status link may be able to view that booking request, so keep it confidential.

Storage and security

Production customer documents are uploaded only through a protected server-side upload function to private Supabase Storage. Direct anonymous uploads to the renter-document bucket are disabled in the hardened production configuration. The system uses authenticated staff access, workspace-level permissions, row-level security, private storage, short-lived file access, HTTPS, security headers, and automatic full dashboard sign-out after inactivity. Image uploads are validated server-side and common embedded image metadata is removed before storage where supported.

Service providers and disclosure

Uprentals may use infrastructure or communication providers strictly as needed to operate the service, such as website hosting, database/storage, authentication, email or messaging delivery, and anti-abuse verification. Access should be limited to authorized Uprentals staff and service providers with an operational need. Renter information is not sold as an advertising list.

Retention and deletion

Renter verification documents are scheduled for review and deletion after the configured retention period; the retention period is configured by Uprentals and begins after a booking is closed. Some booking, agreement, payment, accounting, audit, fraud-prevention, incident, or dispute records may be retained longer when reasonably necessary for business or legal purposes. Uprentals may also retain information when required to establish, exercise, or defend a legal claim.

Your privacy requests

You may contact Uprentals through the official contact details above to ask about personal information associated with your rental, request correction of inaccurate information, or request deletion when retention is no longer necessary or required. Uprentals may need to verify your identity before acting on a request.

Changes to this notice

Uprentals may update this notice as the service, security controls, providers, or legal requirements change. The effective date at the top identifies the current published version.