Privacy Policy

1. Introduction

Welcome to Dream Ride. We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our vehicle rental services.

2. Information We Collect

We collect the following types of information:

2.1 Personal Information

• Account Information: Full name, email address, phone number
• Identification: Driver's license images (front & back), National ID images (front & back), facial photo for identity verification
• Profile Data: Address, date of birth, vehicle preferences
• Payment Information: Payment method, billing address (processed securely through SSLCOMMERZ)

2.2 Rental Information

• Booking Details: Vehicle selections, rental dates, pickup/drop-off locations
• Transaction History: Payment amounts, transaction IDs, booking confirmations
• Communication Records: Emails, messages, customer support interactions

2.3 Document Verification

• Required Documents: Facial photo, Driving License (both sides), National ID Card (both sides) are mandatory for all bookings
• Storage: All verification documents are stored securely in encrypted storage with access restricted to authorized personnel only
• Purpose: Used solely for identity verification, fraud prevention, and compliance with local regulations

2.4 Technical Information

• Device Information: IP address, device type, browser type, operating system
• Usage Data: Pages visited, time spent, clicks, search queries
• Cookies: Session data, authentication tokens, preferences

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Process rentals, manage bookings, confirm reservations
• Identity Verification: Verify driver eligibility, validate licenses, prevent fraud
• Payment Processing: Process payments, handle refunds, prevent payment fraud
• Customer Support: Respond to inquiries, resolve issues, provide assistance
• Communication: Send confirmations, updates, important notices
• Legal Compliance: Comply with laws, respond to legal requests, enforce terms
• Improvement: Analyze usage patterns, improve our services, enhance security
• Marketing: Send promotional offers (only with your consent)

4. Data Sharing and Disclosure

We may share your information with:

• Payment Processors: SSLCOMMERZ for secure payment processing (we never store credit card details)
• Authentication Providers: Supabase, Google, Facebook for login services
• Cloud Storage: Supabase for secure data storage
• Service Providers: Infrastructure providers (Cloudflare, Upstash) for hosting and performance
• Legal Authorities: When required by law, court orders, or government requests
• Business Transfers: In case of merger, acquisition, or sale of assets

We do NOT sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures:

• Encryption: All data transmitted via HTTPS/TLS encryption
• Secure Authentication: Strong password requirements, secure session management
• Access Controls: Role-based access, authentication required for sensitive data
• Regular Security Audits: Continuous monitoring and security updates
• CSRF Protection: Cross-site request forgery prevention
• Rate Limiting: Protection against abuse and attacks
• Data Backup: Regular backups with secure storage

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we implement best practices to protect your information.

6. Cookies and Tracking

We use cookies and similar technologies:

• Essential Cookies: Required for authentication, session management, security
• Functional Cookies: Remember preferences, language settings
• Analytics Cookies: Help us understand usage patterns (anonymized)

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal requirements)
• Portability: Request data in a portable format
• Opt-out: Unsubscribe from marketing emails
• Object: Object to processing of your data for certain purposes

To exercise these rights, contact us at: privacy@rentnride.net

8. Data Retention

We retain your data as follows:

• Active Accounts: While your account is active and for 3 years after last use
• Transaction Records: 7 years (as required by financial regulations)
• Verification Documents: Facial photos, license images, and ID card images retained until account deletion or as required by law (minimum 7 years for compliance)
• Support Records: 2 years after last interaction
• Marketing Data: Until you opt-out or account is deleted

9. Children's Privacy

Our services are not intended for users under the age of 18 (minimum driving age in Bangladesh). We do not knowingly collect information from minors. If we become aware that we have collected information from a minor, we will delete it immediately.

10. Third-Party Links

Our website may contain links to third-party websites (payment gateways, social media). We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any information.

11. International Data Transfers

Your data may be transferred to and stored on servers located outside Bangladesh (e.g., Supabase, Cloudflare). We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Sending an email notification (for significant changes)
• Displaying a notice on our website

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us: