Privacy Policy

Car Candy Rentals LLC (“we,” “us,” or “our”) operates CarCandyRentals.com to provide weekly vehicle rentals to approved rideshare and delivery drivers in Dallas, Texas and Detroit, Michigan. This Privacy Policy explains how we collect, use, store, share, and delete personal information, including identity-verification data collected through Stripe Identity.

We collect the information you provide directly and data generated during the verification and rental process. This includes: - **Account information:** name, email address, phone number, and password. - **Rental application details:** requested pickup date and time, preferred rental length in weeks, primary driving platform (Uber, Lyft, DoorDash, Instacart, or other), pickup or delivery preference, and any notes you provide. - **Identity-verification data:** through Stripe Identity we collect a photo of your government-issued driver's license, a live-capture selfie, and your ID number. Stripe processes the biometric and document images on our behalf. - **Payment information:** the $100 reservation deposit is processed by Stripe. We do not store full payment-card numbers on our servers. - **Usage and communications:** emails, text messages, support requests, and application-status updates. We do not collect Social Security numbers, passport numbers, or other sensitive government identifiers beyond what is required for driver-license verification.

Most information is collected when you fill out forms on CarCandyRentals.com, such as the driver signup form, rental request form, and agreement acceptance page. Identity documents and selfies are captured through Stripe Identity's hosted verification flow, not uploaded directly to our servers. Stripe notifies us only of the verification result, session ID, and timestamp; the actual document and selfie images are retained by Stripe according to Stripe's privacy and security practices.

We use your information to: - Create and secure your driver account. - Evaluate your rental eligibility and platform status. - Verify your identity and driver's license before you pay the reservation deposit. - Process the $100 refundable reservation deposit and any rental payments. - Communicate with you about your application, pickup, return, and support requests. - Send internal alerts to Car Candy Rentals staff when a new application is submitted. - Comply with legal obligations and enforce our rental agreement.

Stripe Identity handles the capture, processing, and short-term storage of your license photo, selfie, and ID number. We store only the verification status (for example, “verified,” “processing,” or “failed”), the Stripe verification session ID, the timestamp of verification, and any error reason returned by Stripe. We do not email full driver's-license numbers, license images, selfies, or payment-card data. Authorized Car Candy Rentals administrators can view verification status in the secure admin dashboard, but the underlying document images remain inside Stripe's systems and are accessed only when required for dispute resolution or legal compliance.

We share information only with service providers necessary to operate the business: - **Stripe, Inc.** for payment processing, identity verification, and deposit refunds. - **Lovable Cloud / Supabase** for secure database hosting and authentication. - **Resend** for sending application-alert emails to our staff. We do not sell your personal information. We may disclose information if required by law, court order, or to protect our rights, property, or safety.

Your account and application data are stored in Lovable Cloud (Supabase) with Row-Level Security enabled, encryption in transit, and industry-standard access controls. Identity document images and selfies are stored by Stripe, which maintains PCI-DSS and SOC 2 compliant infrastructure. Access to our admin dashboard is restricted to authenticated Car Candy Rentals staff members. We never transmit sensitive documents or payment data in plain email or public URLs.

We retain your account and rental-application data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Identity-verification session metadata is retained for the same period. If you close your account or request deletion, we will delete or anonymize your personal information within 30 days, except where we are required to keep it longer by law or for legitimate business purposes such as tax, accounting, or fraud-prevention records.

You may: - Access, update, or correct your account information by signing in to your dashboard. - Request a copy of the personal information we hold about you. - Request deletion of your account and personal data by contacting us at the email below. - Opt out of non-essential communications at any time. We will respond to deletion requests within 30 days. Deleting your account does not automatically refund any paid deposits; refund requests are handled separately according to our deposit terms.

We use essential cookies to keep you signed in and maintain your session. We do not use third-party advertising or analytics cookies that track you across other websites.

Car Candy Rentals is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when the policy was last revised. Continued use of CarCandyRentals.com after changes means you accept the revised policy.