Privacy Policy

The information we collect depends on how you use the Platform.

A. Identifiers and contact information

Name, email address, telephone number, postal or delivery address, account ID, username, IP address, device identifiers, and similar identifiers.

B. Account and business information

Login and authentication information; business name, address, contact details, tax or registration information; fleet and vehicle information; team members, roles, settings, plan, seat count, and support history.

C. Rental application and transaction information

Vehicle selection, rental dates and times, pickup, delivery and return details, additional drivers, eligibility responses, notes, application and booking status, rental agreement data, signatures, timestamps, receipts, cancellations, refunds, disputes, and communications.

D. Driver's-license, identity, and verification information

Driver's-license number, issuing state, expiration date, date of birth, license images, selfie or video submitted for identity verification, verification status, extracted document data, and fraud or risk signals. A third-party identity provider may create or process biometric information as explained in Section 6.

E. Insurance and MVR information

Insurance carrier and policy information, declarations or ID cards, policy status and coverage-related information, driver's-license details used to request an MVR, consent records, MVR status, and report information such as license status, restrictions, violations, or incidents. We do not request a Social Security number for CharterNow's current MVR flow, although a Verification Provider may independently disclose different requirements before collection.

F. Payment and financial information

Stripe and other payment providers collect payment-card or bank information. CharterNow generally receives tokens and related information such as payment method type, last four digits, billing address, transaction status, amount, processor fees, refunds, disputes, and Stripe Connect connected-account identifiers. CharterNow does not store raw payment-card numbers.

G. Vehicle, listing, and uploaded content

Vehicle make, model, year, VIN, license plate, mileage, features, availability, location, prices, photos, registration or insurance documents, Partner Documents, messages, and other files or content submitted to the Platform.

H. Communications and consent records

Support inquiries, contact forms, feedback, email and SMS content, notification preferences, SMS opt-in language, timestamp, IP address, source, and opt-out history.

I. Device, usage, and diagnostics

Browser, operating system, app version, device type, language, referring page, pages or screens viewed, clicks, session and campaign information, crash data, performance logs, security events, cookies, advertising identifiers, and similar technical information.

J. Location information

Approximate location inferred from IP address; addresses and coordinates used for business operations, vehicle listings, delivery, pickup, return, maps, or route planning; and device location only when a feature requests it and you grant permission. We do not collect continuous precise device location unless a feature clearly discloses that collection and you enable it.

K. Mobile-app permissions

With device permission, the app may access the camera or photo library to capture and upload licenses, insurance documents, vehicle photos, and other records; send push notifications; and access location for a disclosed location feature. You can change permissions in device settings, although some features may stop working.

L. Inferences and derived information

Application status, fraud or risk indicators, verification summaries, campaign attribution, product usage trends, and other information derived from the categories above. CharterNow does not make the Partner's final rental decision.

We collect information:

• directly from you;
• from a Partner or its authorized personnel;
• automatically from your browser, device, cookies, pixels, and Platform use;
• from payment, identity, insurance, MVR, messaging, analytics, maps, hosting, and other service providers;
• from additional drivers or other people involved in a rental; and
• from public or commercially available sources where permitted by law.

If you give us information about another person, you represent that you are authorized to do so and will provide any notice and obtain any consent required by law.

We use personal information to:

• provide, operate, maintain, personalize, and improve the Platform;
• create and secure accounts and authenticate Users;
• display listings and manage applications, bookings, documents, signatures, pickup, delivery, return, and customer support;
• process Platform subscriptions and facilitate Partner rental payments through payment providers;
• transmit authorized identity, insurance, driver's-license, and MVR verification requests and results;
• send transactional emails, SMS, push notifications, and other service communications;
• provide analytics, reporting, attribution, and product insights;
• detect, investigate, and prevent fraud, abuse, security incidents, and violations;
• debug, test, research, develop, and improve features, including through aggregated or de-identified information;
• market CharterNow, measure campaigns, and personalize advertising where permitted and subject to your choices;
• comply with law, legal process, audits, and provider requirements; and
• establish, exercise, or defend legal claims and enforce agreements.

Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests, compliance with legal obligations, consent, or another lawful basis disclosed at collection.

We may disclose personal information as follows:

Partners and rental participants

We disclose application, booking, identity, insurance, MVR, payment-status, document, communication, and other relevant information to the Partner and authorized personnel involved in evaluating or performing the rental. We may disclose necessary information to additional drivers or other participants at your direction.

Service providers and processors

We disclose information to vendors that provide cloud hosting, database and file storage, authentication, cybersecurity, analytics, customer support, email, SMS, push notification, maps, AI, payment, identity verification, insurance-data, MVR, e-signature, document processing, and similar services. They may use information only for contracted services and other purposes permitted by law and their applicable direct relationship with you.

Examples include Stripe for payments and identity services, Twilio for SMS, Canopy Connect for insurance-data services, Turn Technologies for MVR or consumer-report services, and our hosting, database, analytics, advertising, email, and support providers. Providers and features may change.

Advertising and analytics partners

Subject to cookie settings and applicable law, we may disclose identifiers, device data, internet activity, and campaign information to analytics and advertising partners such as Google Analytics and Meta Pixel to measure use and campaigns or deliver and assess advertising. California law may define some of these disclosures as “sharing” for cross-context behavioral advertising even when no money is exchanged. See Sections 9 and 10 for choices.

Legal, safety, and corporate disclosures

We may disclose information when we reasonably believe it is necessary to comply with law, subpoenas, court orders, or government requests; protect a person, rights, property, or security; investigate fraud or violations; collect amounts owed; or establish, exercise, or defend legal claims.

We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to appropriate confidentiality protections where required.

At your direction

We disclose information when you direct us to do so or provide consent.

We do not sell personal information for money. We do not sell or share mobile numbers or SMS consent information with third parties or affiliates for their own marketing or promotional purposes.

Identity verification

When a Renter begins identity verification, a third-party provider such as Stripe Identity may collect an identification document and selfie or video and may derive facial geometry or other biometric information to compare identity and assess liveness. The provider presents its own disclosures and consent flow and processes that information under its privacy policy.

CharterNow may receive uploaded images, extracted ID data, verification status, and risk signals. Unless expressly disclosed in the verification flow, CharterNow does not receive or store the provider's raw biometric template. We do not use biometric information for advertising or to infer sensitive characteristics.

MVR and consumer reports

An MVR (motor vehicle record) or related report may be provided by a consumer reporting agency and governed by the FCRA and state consumer-reporting laws. CharterNow transmits the request and result to the requesting Partner. The Partner is responsible for establishing a permissible purpose, providing required disclosures, obtaining authorization, and giving any required pre-adverse-action or adverse-action notices. The report provider—not CharterNow—maintains the source consumer file and handles report disputes and file disclosures. Contact details will be provided in the applicable report or notice.

Insurance information

Insurance data may be obtained from you or, with authorization, from insurance-data providers. It is provided to the applicable Partner to evaluate the rental. It is not a guarantee of coverage and does not replace confirmation by an insurer or licensed insurance professional.

We use essential technologies, cookieless operational measurement, analytics technologies, and advertising technologies on the Platform. These categories are separate and are treated differently under this Policy.

7.1 Essential technologies

Essential technologies support authentication, security, session management, booking and application flows, saved privacy choices, and other functionality necessary to provide services you request. They are used to operate the Platform and are not advertising cookies.

7.2 Vercel Web Analytics

CharterNow uses Vercel Web Analytics as an always-active, cookieless measurement service to understand website traffic and performance. Vercel Web Analytics is designed to provide anonymized or aggregated insights without placing analytics cookies on a visitor’s device.

We treat Vercel Web Analytics as operational website measurement. It is not an essential cookie, and our cookie banner does not disable it. Visitors should not expect to disable all website measurement through cookie preferences alone.

7.3 Google Analytics

CharterNow also uses Google Analytics to understand how visitors navigate and interact with the Platform. Google Analytics may use cookies or similar identifiers and may collect device, browser, approximate location, referral, page-view, and interaction information. Where applicable law requires prior consent, Google Analytics storage will not be enabled unless the visitor permits analytics.

Google Analytics is not strictly necessary to operate the Platform and is not described as always enabled in every jurisdiction. Consent and storage behavior may vary by location and configuration; this Policy does not certify that consent behavior is perfect or legally certified.

7.4 Advertising technologies

Meta Pixel and similar advertising technologies are separate from essential functionality. Where enabled, they may be used for campaign attribution, advertising measurement, and advertising personalization, and they are subject to applicable consent and opt-out rights.

You can manage optional analytics and advertising technologies through the on-site consent banner or Privacy Choices in the site footer. Optional Google Analytics and advertising technologies remain off until you permit them. Changing or withdrawing a choice applies prospectively; events already transmitted cannot be recalled.

We process a recognized Global Privacy Control (GPC) signal as a request to opt out of sale or sharing for the browser or device that sends it. Because cookie preferences are browser- and device-specific, you may need to make a choice on each browser or device. Events transmitted before an opt-out cannot be recalled, but the choice will apply prospectively.

CharterNow does not sell personal information for money. California law may define certain advertising disclosures as “sharing” even when no money is exchanged. Mobile numbers and SMS consent records are not sold or shared with third parties for their own marketing.

Browser “Do Not Track” signals are not uniform. We respond to GPC as described above but may not respond to other signals.

Transactional SMS is sent only when required consent has been provided. Message frequency varies and message and data rates may apply. Reply STOP to opt out and HELP for help. SMS consent is not a condition of purchase or use of the Platform.

You may unsubscribe from marketing email using the link in the message. We may continue to send non-promotional messages about accounts, security, transactions, or legal matters. Push notifications can be disabled in device settings.

We retain messaging consent records as reasonably necessary to honor preferences, demonstrate compliance, and resolve disputes. Twilio and similar messaging providers may process message content and related metadata to deliver those communications.

Depending on where you live and subject to exceptions, you may have the right to:

• know or access personal information we maintain about you;
• obtain a portable copy;
• correct inaccurate information;
• delete certain information;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent where processing is based on consent; and
• appeal our denial of a request.

To submit a request, email contact@charternow.ai, use our account deletion request page, or use our Contact page. Vendor app users can also request deletion under Settings → Account & Security. Include your name, account email or phone number, state of residence, and the right you wish to exercise. We may verify your identity by matching information, confirming control of an email or phone number, requesting authentication, or asking for additional information. Do not send a full driver's-license image or other sensitive document by ordinary email unless we specifically instruct you to use a secure method.

An authorized agent may submit a request where law permits. We may require proof of authorization and direct identity confirmation. We will not discriminate against you for exercising a privacy right.

Some information cannot be deleted or disclosed because of legal obligations, security, fraud prevention, another person's privacy, an active transaction, legal claims, or an exemption. Information maintained by a Partner or Verification Provider must be requested from that entity.

This section supplements the rest of this Policy for California residents. The terms “personal information,” “sensitive personal information,” “sell,” and “share” have the meanings provided by the California Consumer Privacy Act, as amended (“CCPA”).

Categories collected and disclosed

During the preceding 12 months, we may have collected the following CCPA categories, depending on use of the Platform:

We collect these categories from the sources and for the purposes described in Sections 3 and 4.

Sale and sharing

We do not sell personal information for money. If advertising cookies are enabled, our disclosure of identifiers and internet activity to advertising partners may constitute “sharing” under the CCPA. We do not knowingly sell or share personal information of individuals under 16.

You may opt out of sale or sharing through Privacy Choices in the footer or by enabling GPC. We do not use or disclose sensitive personal information to infer characteristics or for purposes that require a separate right-to-limit link under the CCPA. If that changes, we will provide the required notice and choice.

California residents may exercise the rights described in Section 9. If the CCPA does not legally apply to CharterNow at a particular time, we may still honor requests in our discretion where feasible, but doing so does not waive any legal exemption.

California “Shine the Light”

We do not disclose personal information to third parties for their own direct marketing in the manner covered by California's Shine the Light law.

We retain personal information only as reasonably necessary for the purposes described in this Policy, including to provide services, complete rentals, preserve signed records, maintain security, comply with tax, accounting, payment, consumer-reporting, and other legal duties, enforce agreements, and resolve disputes.

Retention depends on the record:

• account and Partner configuration data is generally kept while the account is active and for a reasonable period afterward;
• applications, bookings, transaction records, signed agreements, consent records, and audit trails may be kept for several years because of legal, accounting, payment, dispute, and contract requirements;
• verification documents and results are kept only as long as reasonably needed for the rental, Partner instructions, disputes, fraud prevention, or legal duties, subject to provider retention practices;
• analytics, cookie, security, and diagnostic data is retained according to operational need and provider settings; and
• backups may persist for a limited period after deletion before being overwritten.

When information is no longer needed, we delete, de-identify, or securely dispose of it. Partners and Verification Providers may retain their own copies under their policies and legal duties. Retention also depends on account status, active rental transactions, signed agreements, payment, tax, and accounting obligations, consent records, fraud prevention, disputes and legal claims, provider requirements, backups, and security logs.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, encryption in transit where supported, provider security controls, logging, and personnel-access limitations appropriate to our size and the information involved.

No internet transmission or storage system is completely secure. We cannot guarantee absolute security. You are responsible for protecting credentials, enabling available security features, limiting account access, and promptly reporting suspected misuse.

The Platform is not directed to children under 18, and we do not knowingly collect personal information from them. Do not submit an application, booking, license, or verification request for a person under 18. If you believe a minor has provided information, contact contact@charternow.ai.

We may create and use aggregated or de-identified information for analytics, security, research, product development, and business reporting. Where required by law, we will maintain it in de-identified form and will not attempt to reidentify it except to test our de-identification processes.

CharterNow operates from the United States. If you use the Platform from another country, information may be transferred to and processed in the United States and other locations where our providers operate. Those locations may have different privacy laws. The Platform is not presently offered as a general service in every country.

The Platform may link to or integrate with third-party services. Their privacy practices are governed by their own notices. Review those notices before providing information. CharterNow is not responsible for third-party sites or independent Partner practices. Our Terms of Service also describe important Platform rules.

We may update this Policy to reflect product, legal, or operational changes. We will post the updated Policy and revise the effective date. If a change is material, we will provide additional notice through the Platform, by email, or as required by law before it takes effect.

Charternow AI Inc., doing business as CharterNow

contact@charternow.ai