Privacy Policy

1. Introduction

This Privacy Policy explains how Simple VM ("we," "us," "our") collects, uses, shares, and protects information about you when you use our website, mobile experience, and vehicle rental services (collectively, the "Services").

2. Information We Collect

Information you provide:

• Identity & contact data: full legal name, date of birth, gender, address, phone, email.
• Verification data: driver's license number and image, a selfie holding your license, and insurance details.
• Account credentials: password (stored hashed) and authentication tokens.
• Booking data: vehicle selected, trip dates, delivery/pick-up addresses, signed agreements (including printed name, signature, and initials), and communications with us.
• Payment data: processed by our payment providers; we do not store full card numbers.

Information collected automatically:

• Device, browser, IP address, log data, and usage analytics.
• Vehicle telematics during an active booking (location, speed, engine status, lock state) where vehicles are so equipped.
• Cookies and similar technologies used to keep you signed in and to improve the Services.

3. How We Use Information

• Verify identity and eligibility, and approve, decline, or deactivate accounts.
• Operate, maintain, and improve the Services and process bookings.
• Communicate with you about your account, bookings, safety, billing, and support.
• Detect, investigate, and prevent fraud, abuse, theft, and unsafe operation of vehicles.
• Comply with legal obligations and enforce our Terms of Service.

4. How We Share Information

We share information only as needed and with appropriate safeguards:

• Service providers — hosting, database, authentication, payment, telematics, identity verification, communications, and analytics vendors.
• Insurers, claims administrators, and roadside/recovery providers — when relevant to a booking, incident, or claim.
• Law enforcement and other authorities — when required by law, in response to lawful requests, or to protect rights, safety, or property.
• Successors — in connection with a merger, acquisition, financing, or sale of assets.

We do not sell personal information for money. Advertising measurement sharing described below may be treated as sharing or targeted advertising under some privacy laws; you may opt out.

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Services, meet our legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. Information from deactivated accounts is retained to prevent re-registration with the same driver's license, phone number, or other identifier, and for fraud-prevention and legal purposes.

6. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, row-level access controls in our database, and restricted access for staff. No system is perfectly secure; you use the Services at your own risk.

7. Your Choices & Rights

• Access, correct, or update your profile information from your account page.
• Request a copy or deletion of your personal information, subject to legal and operational retention requirements.
• Opt out of non-essential marketing emails using the unsubscribe link in those messages.
• Manage cookies through your browser settings; some features may not work without them.

Residents of certain states or countries may have additional rights under applicable privacy laws. Contact us to exercise those rights.

Advertising measurement and privacy choices

Where permitted, we use Google Ads, Google Analytics and Meta (Facebook) to measure visits, newly submitted rental inquiries and confirmed trip payments, attribute them to advertisements, and help advertising systems optimize delivery. An inquiry is not an approval or a paid rental.

These providers may receive browser/device and IP information, page and referrer information, advertising cookie and click identifiers (such as GCLID, _fbc and _fbp), event times, and an opaque inquiry or transaction identifier. Payment reporting may include the actual payment amount and currency. We do not send inquiry names, emails, phone numbers, income evidence, license images, background-check details or chat messages as advertising matching data.

We keep our no-banner approach: advertising tags, identifier capture and measurement are blocked in the EEA, United Kingdom, Switzerland, and unresolved locations. Because our location check cannot distinguish Quebec, all Canada is blocked. No consent grant is inferred from visiting, submitting a form, accepting this policy or restoring regional defaults. Outside those regions ordinary measurement may run unless you opt out; browser Global Privacy Control is honored.

Use Advertising privacy choices here or in the website footer to turn off measurement or restore regional defaults. Opening choices does not change your setting. Refusal stops new browser reporting and later payment reporting linked to inquiries submitted with this browser’s privacy reference, including across open tabs. Events blocked when they occurred are not replayed after a later change. Other devices and older inquiries without a privacy reference may require a request through our website chat or team; older unlinked inquiries are excluded from later payment reporting.

We retain a random browser privacy reference, the regional result, the time and history of choices and this notice’s version (2026-10-11-no-banner-v1). Withdrawal does not erase earlier choice evidence or reports already received by providers. Ad-click attribution stored in this browser expires after 90 days; privacy settings remain until changed or browser storage is cleared.

Read Google’s privacy information and Meta’s Privacy Policy. Advertising platforms still count ad clicks and impressions independently of website measurement.

8. Children

The Services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us so we can delete it.

9. International Users

The Services are operated from the United States. By using the Services, you understand your information may be processed in the United States and other jurisdictions that may have different data-protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. The "Last updated" date above indicates when this Policy was most recently revised.

11. Contact Us

For questions about this Privacy Policy or our data practices, contact Simple VM through the in-app chat or your account page.