Privacy Policy

1. Introduction

This Privacy Policy explains how CarFleex ("we", "our") collects, uses, and protects the personal information you provide when using our car rental management platform.

2. Information We Collect

We collect the following categories of information:

• Account data — name, email, password (hashed), business name, phone
• Customer records you enter — your customers' names, contact details, ID document photos, addresses
• Vehicle, rental, and reservation data — including photos you upload
• Online booking requests — when a customer asks a rental business for a booking through its public page, they sign in with Google and we receive their Google account identifier, name and email address, plus the mobile number, note and dates they enter. We never receive their Google password. The request is shared with that business only, and the customer can see and withdraw it in My Bookings.
• Payment data — subscription purchases are handled by Google Play; we receive a purchase token and status from Google, not your card or GCash details. Accounts holding access from before this change may have a GCash payment screenshot on file, submitted through the CarFleex web portal for that earlier review.
• Technical data — IP address, device type, app version, basic usage logs needed to operate the service

3. How We Use Your Information

• To provide and operate the CarFleex service
• To review subscription requests submitted through the web portal and update account access
• To send transactional emails (account verification, password resets, billing)
• To show an online booking request to the business it was sent to, and to email the customer when that business confirms or declines it
• To investigate abuse, security incidents, or violations of our Terms
• To improve the service (aggregated, non-identifying analysis only)

4. Customer Data You Upload

Information about your customers (including ID photos) is your responsibility. You must have a lawful basis and the customer's consent to upload it. We store this data on your behalf and do not use it for any purpose other than providing the service to you.

5. Data Sharing

We do not sell your data. We share it only with:

• Hosting and email infrastructure providers necessary to run the service
• Authorities when legally required (subpoena, court order, fraud investigation)

6. Data Retention

We retain account and business data for as long as your account is active. Upon account closure, we may retain data for a reasonable period for backup, dispute resolution, or legal compliance, after which it is deleted.

7. Security

We use industry-standard practices to protect your data: encrypted transport (HTTPS), password hashing, access controls, and regular updates. No system is perfectly secure; you use the service at your own risk.

8. Your Rights

You may:

• Access and update your profile from the in-app Profile screen
• Delete records (vehicles, customers, rentals) you've created
• Manage or cancel a subscription through the CarFleex web portal
• Request full account deletion by emailing lonpdzon@gmail.com

9. Google Play Billing

Subscription purchases are made through Google Play Billing in the CarFleex Android app. Google processes the payment; we do not see or store your card or Google Play account details. We receive a purchase token, the plan purchased, and its status (active, cancelled, in a payment grace period, and similar) from Google, which we use to grant access to the plan you paid for. See Google's own privacy policy for how Google Play handles your payment information.

10. Children

CarFleex is intended for use by businesses and adults. We do not knowingly collect information from anyone under 18.

11. Changes to This Policy

We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email or in-app notification.

12. Contact

Questions, requests, or complaints regarding your privacy? Email lonpdzon@gmail.com.