Privacy Policy

For Operator accounts (business name, staff logins, billing), EventRentalOS decides how data is used — we act as the data controller. For the information an Operator’s customers submit through that Operator’s storefront and records (names, contact details, event addresses, orders), we process it on the Operator’s behalf and under their instructions; the Operator is responsible for how that customer data is used. Requests about a rental business’s records should go to that business.

• Account information — name, email, password (stored by our identity provider as a hash), and workspace details such as business name, address, phone, and time zone.
• Billing information — plan selection and subscription status. Card details are collected and stored by our payment processor (Stripe), not on our servers.
• Operator Content — catalogs, photos, orders, quotes, customer records, documents, and website content Operators create in the Service.
• Usage and log data — request logs, device/browser type, and diagnostic events used to run and secure the Service.

• To provide, secure, and support the Service, including hosting Operator storefronts and sending the notifications Operators configure.
• To operate billing, prevent abuse, and enforce our Terms.
• To communicate service changes and, where permitted, product updates you can opt out of.
• We do not sell personal information.

We share information only with service providers that help us run the platform — cloud hosting (Amazon Web Services), payment processing (Stripe), email delivery, and SMS/voice carriers — each bound to use it only to provide their service, and with authorities when the law requires it. If EventRentalOS is involved in a merger or acquisition, data may transfer with the business subject to this policy.

The dashboard uses storage that is strictly necessary for signing in and keeping your session. Operator storefronts load analytics or advertising trackers only if the Operator configures them and the visitor accepts the storefront’s consent banner; declining loads nothing.

We keep information while an account is active and as needed for legal, billing, and security purposes. When a workspace is deleted, its content is removed from the active Service and purged from backups on a rolling schedule. Operators can export their data before deleting a workspace.

Data is encrypted in transit, access is restricted by role, and production secrets are stored in managed secret stores. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as required by law.

You can access and update account information in the dashboard, export Operator Content, and delete your workspace. Depending on where you live, you may also have rights to request access, correction, deletion, or portability of your personal information — contact us and we will respond as the law requires. For data a rental business holds about you as its customer, contact that business; we will assist them in fulfilling the request.

The Service is for businesses and is not directed to children under 13, and we do not knowingly collect their personal information.

We may update this policy from time to time. Material changes will be announced to account owners by email or in the dashboard before they take effect, and the current version will always be available at this page’s address.

Privacy questions or requests: support@eventrentalos.com.