Privacy Policy
Last updated: January 2026
1. Information We Collect
We collect information you provide directly to us when using KAPI:
- Account Information: Name, email address, phone number, and password when you create an account
- Profile Information: Profile photo, driver's license, and billing address
- Payment Information: Credit card details processed securely through Stripe (we do not store full card numbers)
- Booking Information: Trip dates, locations, and rental history
- Communications: Messages between hosts and guests on our platform
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process bookings and payments
- Verify your identity and driver's license
- Send you booking confirmations, reminders, and updates
- Facilitate communication between hosts and guests
- Respond to your questions and support requests
- Detect and prevent fraud or abuse
3. SMS Communications
When you create a KAPI Cars account, you provide your phone number and consent to receive SMS messages. Here's what you need to know:
Types of Messages
- Verification codes: One-time codes to verify your phone number during signup (required)
- Booking confirmations: When your booking is confirmed or updated
- Trip reminders: Reminders before your trip starts or ends
- Trip status updates: Important notifications about your active trips
Message Frequency
Message frequency varies based on your activity. You'll receive 1 verification code per login attempt, and approximately 2-5 messages per booking (confirmation, reminders, status updates).
Opting Out
You can opt out of SMS messages at any time by replying STOP to any message. Reply HELP for assistance. Note: Opting out may affect your ability to receive important trip updates and verification codes.
Message and data rates may apply. Check with your carrier for details.
4. Information Sharing
We do not sell your personal information. We may share your information with:
- Other Users: Hosts see guest names and contact info for confirmed bookings; guests see host names and vehicle details
- Service Providers: Third parties who help us operate (Stripe for payments, Twilio for SMS verification)
- Legal Requirements: When required by law or to protect our rights
5. Data Security
We implement appropriate security measures to protect your personal information. Passwords are hashed using industry-standard encryption. Payment information is processed securely through Stripe and we never store full credit card numbers on our servers.
6. Data Retention
We retain your information for different periods depending on the type of data and legal requirements:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Booking records | 7 years | Tax/IRS requirements |
| Payment records | 7 years | Financial audit requirements |
| Trip condition photos | 3 years | Damage claim resolution |
| Payment method (Stripe) | 90 days post-deletion | Toll/ticket liability |
| Messages | Deleted with account | User privacy |
After the retention period, data is either permanently deleted or anonymized so it can no longer be linked to you.
7. Account Deletion
You can request deletion of your account at any time from your Profile Settings. Our deletion process works in two phases:
Phase 1: Immediate (Upon Request)
- Your personal information (name, email, phone, address) is anonymized
- Your profile photo and driver's license images are permanently deleted
- Your messages are deleted
- Your account is deactivated and you can no longer log in
- Your payment method is retained for 90 days (see Phase 2)
Phase 2: Complete Deletion (After 90 Days)
- Your Stripe customer profile is permanently deleted
- All remaining identifiable data is removed
- Only anonymized booking records remain (for tax compliance)
Why 90 days? Tolls and parking tickets can take 1-8 weeks to arrive after a trip. Traffic violations may take up to 12 months. We retain your payment method during this period to process any legitimate charges from your trips.
Note: You cannot delete your account if you have active bookings, pending host inspections, open damage claims, or outstanding payments. Please resolve these first.
8. Your Rights
You have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your account and personal data (see Section 6)
- Portability: Request your data in a portable format
- Opt-out: Unsubscribe from marketing communications at any time
California Residents (CCPA): You have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete, and the right to opt-out of the sale of personal information. We do not sell your personal information.
9. Cookies
We use essential cookies to keep you logged in and remember your preferences. We do not use third-party tracking cookies for advertising purposes.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our platform.
11. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at privacy@kapicars.com