Privacy Policy
Last updated: June 13, 2026
This policy explains what Rental Pro CRM by LEGACY collects and how we use it. It covers the platform itself — rental companies remain responsible for the renter data they choose to store.
1. What we collect
Account details (name, email, phone, company); content you enter (fleet, bookings, expenses, messages, and renter/client information such as names, driver’s license numbers, and insurance); and basic usage and device data. Payment details are collected and stored by Stripe — we receive only limited billing metadata, never full card numbers.
2. How we use it
To provide and improve the Service, process subscriptions, send transactional email (password resets, contracts, trial reminders), power the broker marketplace and investor reports, operate the Do Not Rent watchlist, and keep the platform secure.
3. Who we share it with
Service providers that run the platform: Stripe (payments), Resend (email), and our hosting/database providers (Vercel, Neon). Within the platform, your public company profile and any marketplace or lease listings are visible to other users, and Do Not Rent entries are shared with participating rental companies. We don’t sell your data.
4. Renter & client data
When a rental company stores a renter’s personal information (including license and insurance), that company is the controller of that data and responsible for handling it lawfully; we process it on their behalf to provide the Service. Watchlist information is user-reported and may be inaccurate — see our Terms. Individuals who believe their information is listed or used in error may contact us to request review, correction, or removal.
5. Retention & security
We keep data while your account is active and for a reasonable period after. We use signed sessions, encrypted transport, and access controls to protect it. Uploaded license images are stored to support your bookings; delete them when no longer needed.
6. Your choices
You can view and update most information in the app, cancel your subscription anytime, and request access to or deletion of your account data by emailing us. We use only essential cookies (your sign-in session); we don’t run third-party ad tracking.
7. Children & changes
The Service isn’t intended for anyone under 18. We may update this policy; material changes are posted here with a new date.
8. Contact
Privacy questions or data requests: info@exoticsbylegacy.com.
This document is a general template, not legal advice. Have counsel review it for your jurisdiction before relying on it.