Privacy Policy

We collect the name, email address, WhatsApp number, delivery and return details, scooter preferences, booking history and support messages needed to operate your rental.

At handover the rental partner records verification evidence for the rental: a photo of your identity or driving document, a photo of you with the vehicle, and photos or video of the scooter's condition at handover and return. These images are stored privately, are accessible only to the assigned partner and Vroomad operators, and access to an identity document is logged.

If you enter your contact details during booking but do not pay, we keep them — name, email address, WhatsApp number and the trip you were arranging — so we can follow up about the booking you started. They are deleted after 30 days, or become part of your booking record if you complete it.

Stripe processes your payment details. Vroomad receives payment status and transaction identifiers but does not receive or store your full card number.

Stripe also keeps the payment method used for your booking on file, so that a claim the partner has documented and Vroomad has accepted under the Booking Terms can be charged to it. Vroomad stores only Stripe's customer and payment-method identifiers, never the card number, expiry date or security code. That reference stays with the booking record and is used for nothing but an accepted claim on that booking.

We use your information to price and create the booking, match it with an eligible rental partner, coordinate delivery and return, process payments, refunds and accepted claims, prevent fraud, answer support requests and maintain legally required records.

We share only the operational details required by the confirmed rental partner and by providers supporting payments, hosting, email, WhatsApp, website analytics, advertising measurement or fraud prevention. We do not sell personal information.

Some providers may process information outside your country. We select providers with contractual and technical safeguards appropriate to the service they perform.

Booking and payment records are retained for the period needed to provide support, resolve disputes and meet accounting or legal obligations. Access is restricted and sensitive booking links use dedicated access tokens.

Delivery verification evidence — identity document photos, renter-with-vehicle photos and scooter-condition media — is kept only for a limited period after the rental is completed (by default 30 days) and is then deleted automatically. If a dispute is open, the related evidence is kept until the dispute is resolved and is then deleted on the same schedule.

Contact details left in an unfinished booking are deleted automatically after 30 days.

Beyond the storage that keeps your booking session working, we measure in the ways described below.

Google Analytics is loaded with every storage category denied: no analytics cookie is written before you accept the banner.

Our hosting provider Cloudflare counts page views with its cookieless Web Analytics. It stores nothing on your device, sets no identifier and cannot follow you to other sites, which is why it does not wait for the banner.

We count booking-funnel steps on our own servers with a random per-visit identifier that exists only for your browser tab, is never shared with anyone, cannot follow you to other sites, and is deleted after 90 days.

If you arrive from a partner venue's QR code, we add one to that venue's arrival count, at most once per browser, so the venue can tell whether its code is used. The result is a single number held next to that venue and it identifies nobody.

If you accept analytics in the banner and arrived by clicking one of our Google ads, that link carries a click identifier created by Google. We keep it in your browser for up to 30 days and attach it to a booking you make in that time; once the booking is paid we send it back to Google with the amount, so Google can tell which of its ads led to a rental. Nothing else goes with it — no name, no email, no phone — and it is the only advertising identifier we hold. Attached to a booking it is kept with that booking record for as long as the booking is, and declining the banner means it is never stored at all.

Only if you accept analytics in the banner, we also record how our pages are used — clicks, scrolling and page changes — under that same per-tab identifier. Anything you type is masked on your device and never reaches our servers, the pages that display your booking details are never recorded, and these recordings are deleted after 30 days. Declining or ignoring the banner means no recording at all.

We use those measurements to see which pages travellers arrive on and where the booking flow loses them, so we can fix what does not work. We run no advertising tag and build no advertising profile: the click identifier described above is reported back to Google to credit an ad with a rental, never to profile you, and Google Analytics keeps every advertising signal denied for the whole session. Measurement never covers the operator back-office or the partner portal.

You can change your answer at any time from the “Cookie preferences” link at the bottom of any page. Declining leaves the site fully usable.

You may ask to access, correct or delete eligible personal information, or object to certain processing, by contacting ops@getvroomad.com. We may need to verify your identity and retain records that the law requires us to keep.

This policy is written in English. Any version in another language is a translation produced with automated tools and may be approximate. Where the two differ, the English version is the one that describes what we actually do with your information.