GigRentals LLC
Privacy policy
Effective 2026-08-19. Templates — not legal, tax, or insurance advice.
GigRentals materials are product templates for an application process. They are not legal, tax, or insurance advice. A California attorney and a licensed broker must review any live program. Quotes are estimates. Applications are not offers. Inspection, underwriting, match, and countersignature are required before any vehicle changes hands.
GigRentals LLC collects identity, vehicle, payment identifiers, device data, and (after hardware install) telematics to run a California P2P car-share marketplace, prevent fraud, and meet tax and insurance duties. We do not sell personal information. See Privacy for categories, retention, and CPRA requests.
1. Who we are
GigRentals LLC, 88 Market Street, San Francisco, CA 94105. Email hello@gigrentals.com or privacy@gigrentals.com. We operate a California marketplace that matches idle cars with approved gig lessees. We are not a rental-car agency and we do not take title.
2. Notice at collection
Categories, purposes, and whether we sell or share are in the table. “Share” here means CPRA cross-context behavioral advertising. We do not do that. We do not sell personal information. We honor the Global Privacy Control (GPC) signal as an opt-out of sale/share and of optional device telemetry.
| Category | Examples | Purpose | Sold / shared? |
|---|---|---|---|
| Identity | Name, email, phone, government ID images (Stripe Identity / Jumio), selfie match | Account, FCRA/MVR, fraud, tax forms | No |
| Payments | Stripe customer / Connect account IDs. Card numbers never touch this server. | Deposits, seat rent, host payouts in arrears | No |
| Vehicle & listing | VIN last 6, plate last 4, odometer, photos, condition reports | Listing, inspection, claims | No |
| Telematics | Hardwired GPS pings, immobilize events, neighborhood (not live street pin to hosts) | Theft recovery, mileage vs lease, default immobilize | No |
| Device / browser | UA Client Hints, language, cores, device memory, network type, screen, timezone, storage estimate, display-mode. No canvas fingerprint. No GPS prompt from the browser. | Fraud, support, PWA install. Desk telemetry. | No |
| Messages | In-app chat (PII stripped), support email, SOS | Safety and support | No |
| Signed records | UETA signatures, initials, listing/owner/driver agreements, booking contracts | Enforce the deal; discovery | No |
3. Sensitive personal information
Government ID images, precise geolocation from a hardwired tracker (after you agree to install it), and login credentials are used only to provide the service, prevent fraud, and meet insurance/tax duties. We do not use sensitive PI to infer characteristics.
4. Sources and recipients
You, your device, Stripe (cards and Connect), identity vendors (Stripe Identity or Jumio), Checkr (MVR), the tracker vendor, and (if you enable them) Google or Apple for sign-in. We give hosts a seat code, not a lessee last name. We give lessees listing facts, not the host’s full address until a window is sold.
5. Retention
- Identity. Life of account + 7 years if a 1099 or claim attached
- Payments. 7 years (tax and Stripe dispute windows)
- Vehicle & listing. Life of listing + 3 years; 7 years if a claim
- Telematics. 90 days operational; 2 years if an incident file is open
- Device / browser. 90 days (last 200 snapshots in demo)
- Messages. 2 years; SOS indefinitely with the incident
- Signed records. 7 years
6. Your CPRA rights
California residents may request know/access, delete, correct, and to opt out of sale/share (already off). We will not discriminate for exercising a right. We keep tax, insurance, and safety records even after a delete, as the law allows. Submit /privacy/request or email privacy@gigrentals.com. We will verify you (email + account). An authorized agent may write if they include your signed permission.
7. Device data and cookies
Session cookies keep you signed in. A first-visit notice explains device snapshots used for fraud and support. Details: Cookie & device notice. You can turn optional telemetry off in that banner or by sending GPC.
8. Children
The service is 21+. We do not knowingly collect from anyone under 16.
9. Changes
Material changes will be dated on this page. Continued use after the date is acceptance of the update for the parts the law lets us change that way.