Privacy Policy

SRentSoft (“we”, “us”) provides fleet and rental management software to car rental companies (“Customers”). This policy explains what information we collect through the service, how it is used, and how it is protected.

Account data. When a Customer signs up, we store the company name and the username and password (as a one-way bcrypt hash, never in plain text) of each staff account they create.

Client and rental records. Customers use the service to record their own renters’ details (name, date of birth, passport or ID number, driving licence details, phone, email, address and citizenship) along with vehicle, reservation and rental contract records. This data belongs to the Customer; we process it only to provide the service to them.

Authentication data. We use a session cookie to keep a staff member signed in, and we briefly track failed login attempts per account to detect and slow down password-guessing attacks. Neither is used for tracking or advertising.

Solely to operate the service: authenticating users, storing and displaying the records a Customer enters, generating rental contracts and reports, and, where a Customer has a paid subscription, processing billing. We do not sell personal data or share it with third parties for advertising.

We use one strictly-necessary cookie to keep you signed in (httpOnly, so it cannot be read by scripts). We do not use third-party analytics or advertising cookies.

Passwords are hashed with bcrypt and never stored in plain text. All traffic is served over HTTPS. Login attempts are rate-limited, and the login form may be protected by Google reCAPTCHA where enabled. Data is stored in a managed PostgreSQL database and the application is hosted on Vercel; no data is stored on our own physical servers.

We rely on a small number of infrastructure providers to run the service: our hosting provider (for the application itself), our database provider (for stored records), and, where a Customer enables paid billing, Stripe for payment processing. Where reCAPTCHA is enabled, Google receives the information described in its own privacy policy to assess whether a login attempt is automated.

Data is retained for as long as a Customer’s account is active. A Customer or their renter can request correction or deletion of specific records at any time through the Customer; on account closure, data is deleted or anonymized within a reasonable period, except where we are required to keep it longer by law.

Depending on where you are, you may have the right to access, correct, export, or request deletion of your personal data. If your data was entered by a car rental company using this service, please contact that company directly, as they control the record; they can reach us if they need our assistance.

We may update this policy from time to time. Material changes will be reflected by updating the “last updated” date above.

Questions about this policy can be sent to smartsystemsolutions.mk@gmail.com.