Privacy Policy

Who handles your data

Platform provider: DonchevApps. Jeleznik 21, Stara Zagora, Bulgaria

[email protected]

Each fleet operator manages its renters’ data and rental terms. Use the contact details on its fleet page for questions about a specific booking. One fleet’s records are not shared with other fleets.

Data we use and why

• Account: email and authentication information for access and account recovery. Passwords are managed by Supabase Auth.
• Rentals: customer name, phone number, dates, times and notes for responding to inquiries and managing bookings.
• Fleet: vehicles, registration plates, photos, rates, revenue, expenses, service records, payments and change history for management and reporting.
• Inspections: mileage, fuel, condition and photos at handover/return. These remain private to the fleet and are not part of the public catalogue.
• Notifications: device token and language for sending enabled reminders and notifications.
• Optional calendar: Google Calendar authorization information and pickup/return events. Events may contain customer names and phone numbers; check who can access your calendar.
• Subscriptions: purchase identifiers, plan, expiry and status for access verification. Payment cards are handled by the App Store or Google Play and are not stored in the VehRoster database.
• Security: technical errors, delivery information and short-lived identifiers for preventing abuse.

Public and private information

Only explicitly published vehicles, descriptions, rates and catalogue photos are public. Renter names and phones, internal notes, financial reports and inspections are not shown to visitors.

Providers and permissions

VehRoster uses Supabase for authentication, database and storage; Google/Firebase for notifications and authorized calendar connections; Apple and Google for store purchases. Cloudflare is planned for website hosting. Calendar connection, photo access and notifications are user-controlled.

Retention and deletion

Data is needed to operate the account and fleet. A deletion request requires review of personal data, shared fleet records and any legal retention obligations. Category-specific periods, backup handling and connected calendars will be finalized before public release.

Your rights

You can request access, correction, deletion or portability of your personal data and, where applicable, restriction of or objection to processing. Contact the fleet operator for rental records and VehRoster for your account. You may complain to the Bulgarian Commission for Personal Data Protection or your competent supervisory authority.

Before public release

Still to be confirmed: full provider address and working contact, legal bases, retention periods, processor agreements and applicable international transfers. This draft is not submitted as a final store privacy policy.