Privacy Policy

1. Who we are

RentConsole is operated by [LEGAL ENTITY NAME — e.g. RentConsole Rentals Private Limited], registered at [REGISTERED ADDRESS, Hyderabad, Telangana, PIN CODE]. In this policy “we”, “us” and “our” mean [LEGAL ENTITY NAME — e.g. RentConsole Rentals Private Limited]. We are the Data Fiduciary for the personal data described here, as that term is used in India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

2. The short version

• We rent equipment without taking a security deposit. To do that safely, we must confirm you are a real, identifiable person — so identity verification is central to our service.
• We collect only what we need to deliver, collect and protect our equipment.
• Your Aadhaar, PAN and selfie images are stored encrypted and are never made public.
• We never sell your personal data. Ever.

3. What we collect

3.1 Account information

• Your mobile number (used to sign in via a one-time password).
• Your name, and optionally your email address.
• Delivery addresses you save, and your city.

3.2 Order information

• What you rented, the rental dates and the price paid.
• Your delivery address and your chosen delivery time slot.
• A map location (latitude and longitude) that you place yourself at checkout, so our delivery staff can find you. You choose this pin; we do not track your location in the background.
• Return/pickup details you schedule.
• The location of our equipment while it is out on rent. Because we take no security deposit, some equipment contains a concealed GPS device that reports the equipment's location to us. This tracks our property, not you — it is not linked to your phone, and it does not record audio. We use it only to protect and recover our equipment; the data is ours, kept for the duration of the rental (and briefly afterwards for dispute or recovery), and is covered by the security clause of our Terms & Conditions.

3.3 Identity verification data (sensitive)

Because we do not take a security deposit, we verify identity. Depending on how you verify, this may include:

• Aadhaar details obtained through DigiLocker — with your explicit consent, given inside DigiLocker itself. We receive your name, date of birth and Aadhaar photograph. We never see or store your DigiLocker or Aadhaar password/OTP.
• A selfie, which is compared against your Aadhaar photograph to confirm it is really you, and checked to confirm a live person took it.
• PAN number and card image, and Aadhaar card image, where our staff verify you in person rather than online.

3.4 Payment information

Payments are processed by our payment provider (Cashfree). Card numbers, UPI credentials and bank details are entered on their systems, not ours. We never receive or store your full card details. We store only the payment status and amount.

3.5 Technical and fraud-prevention data

To protect our equipment (in the absence of a deposit) we automatically assess the risk of each booking. This uses:

• Your IP address and its reputation (for example, whether it is a VPN, proxy or anonymising network).
• Whether your email address belongs to a known disposable/throwaway provider.
• Whether your phone number is a real mobile line or an internet number.
• Whether the identity details match an existing account (to detect duplicate registrations).

3.6 Communications

• WhatsApp and SMS messages we send you about your order.
• Support tickets and chat conversations you have with us.

4. Why we use it

We rely on your consent for identity verification, and on the performance of our rental contract with you and our legitimate interest in preventing fraud for the rest. You may withdraw consent (see section 8) — but note we cannot rent to you without verifying your identity.

5. Who we share it with

We do not sell your data. We share the minimum necessary with service providers who process it on our instructions:

We may also disclose data where required by law, a court, or a lawful request from a government authority, or to establish or defend legal claims.

6. How we protect it

• Identity documents are encrypted. Aadhaar and PAN images and numbers, and your selfie, are stored in an encrypted vault using AES-256-GCM encryption. Even someone with access to the underlying database cannot read them without the separate encryption key.
• Never public. Identity documents are never placed in public file storage and are never served over a public link.
• Staff access is restricted. Our admin system uses per-person logins and permissions: only staff explicitly granted identity-verification access can view verification documents, and every administrative action is logged.
• Data is transmitted over encrypted (HTTPS) connections.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

7. How long we keep it

• Account and order records: for as long as your account is active, and afterwards for as long as needed for tax, accounting and legal purposes.
• Identity verification records: retained for up to 8 years, in line with record-keeping expectations for identity checks, then deleted.
• Fraud-prevention signals: kept only as long as needed to assess risk and investigate disputes.

When data is no longer needed for any of the above, we delete it.

8. Your rights

Under the DPDP Act you have the right to:

• Access — ask what personal data we hold about you and how we use it.
• Correction — have inaccurate or incomplete data corrected or updated.
• Erasure — ask us to delete your data, unless we must keep it by law.
• Withdraw consent — for processing based on consent (this may mean we can no longer rent to you).
• Grievance redressal — complain to us and receive a response (see section 9).
• Nominate — nominate another person to exercise your rights if you die or become incapacitated.

To exercise any of these, email support@rentconsole.in from your registered address or contact us from your registered mobile number. We may need to verify your identity before acting on a request.

9. Grievance Officer

In accordance with the DPDP Act 2023 and the Information Technology (Intermediary Guidelines) Rules, our Grievance Officer is:

[GRIEVANCE OFFICER NAME]
[LEGAL ENTITY NAME — e.g. RentConsole Rentals Private Limited]
[REGISTERED ADDRESS, Hyderabad, Telangana, PIN CODE]
Email: grievance@rentconsole.in
Phone: [+91 XXXXX XXXXX]

We aim to acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

10. Children

Our service is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Cookies and similar technologies

We use browser storage to keep you signed in, remember your cart and remember your rental dates. We use a secure cookie for staff sign-in to the admin console. We do not use third-party advertising or cross-site tracking cookies.

12. Changes to this policy

We may update this policy as our service changes. We will update the “Last updated” date above, and for significant changes we will notify you.

13. Contact us

[LEGAL ENTITY NAME — e.g. RentConsole Rentals Private Limited]
[REGISTERED ADDRESS, Hyderabad, Telangana, PIN CODE]
Email: support@rentconsole.in  ·  Phone: [+91 XXXXX XXXXX]