Last updated: July 23, 2026
This Privacy Policy explains how Atlas Rental.io ("Atlas", "we", "us") collects, uses, shares, and protects information in connection with our platform (the "Service"). Atlas plays two roles. For information about our own customers (the businesses that use Atlas) and visitors to our site, we are the controller. For personal information that our customers collect about their own renters and clients ("End Customers") and process using the Service, our customer is the controller and Atlas acts as a processor on that customer's behalf and under our agreement with them. If you are an End Customer, please contact the business you rented from about its privacy practices.
Account and business information you provide: your name, business name, email, business mailing address, and settings. Billing information: your subscription, plan, and status, and limited payment details from our payment processor (such as card brand and last four); we do not receive or store full card numbers. Content you submit: assets, bookings, pricing, messages, documents, and records you enter. End Customer information our customers process through the Service, which may include a renter's name, email, phone, notes, and booking details; government ID, driver's-license, or insurance images; vehicle condition photos and video; electronic signatures (including the signer's name, IP address, timestamp, and a fingerprint of the signed document); payment status; and, where a customer connects GPS/telematics, the location, speed, and route of a vehicle during a rental. Usage, device, and log data: IP address, browser and device type, pages and features used, and timestamps, collected to operate and secure the Service. Security data: limited technical signals (such as IP, device, and network information) used to detect and prevent fraud and abuse. We do not intentionally collect Social Security numbers, financial-account numbers, health information, or information about children.
We collect information directly from you and your authorized users; from your End Customers when they book, sign, pay, or upload through a booking site or portal you operate on the Service; automatically from devices when the Service is used; and from our sub-processors (for example, payment status from Stripe).
We use information to provide, operate, maintain, secure, and improve the Service; to create and manage accounts; to process subscriptions and payments; to enable the features you use (bookings, contracts, payments, messaging, tracking, analytics, and AI assistance); to provide support; to send service, security, and transactional messages; to detect, prevent, and investigate fraud, abuse, and security incidents; and to comply with law. We do not sell your personal information, and we do not use End Customer personal information for our own independent purposes.
Where the EU or UK GDPR applies, we rely on these legal bases: performance of a contract (to provide the Service you request); our legitimate interests (to secure, support, and improve the Service and prevent abuse); consent (where required, such as for certain communications); and compliance with legal obligations. Where Atlas acts as a processor, our customer is responsible for the lawful basis for processing End Customer data.
We share information with sub-processors that help us run the Service (listed below), under contracts that limit their use of it to providing services to us. We may also share information to comply with law or valid legal process; to enforce our Terms; to protect the rights, safety, and property of Atlas, our customers, or others; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy. WE DO NOT SELL your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.
We use the following categories of sub-processors: Cloudflare (hosting, storage, security, and infrastructure); Stripe (payment processing); Resend (email delivery); Twilio (SMS delivery); AI providers (Anthropic, OpenAI, and Google) to power assistant and drafting features; a domain registrar (for domain registration); and any GPS/telematics provider a customer chooses to connect. A current list of the third parties involved in a given account is maintained in the Service, and we update it as our sub-processors change.
When you use AI-assisted features, relevant business and, where applicable, customer data is sent to our AI providers to generate responses. We use providers that process this data to provide the feature. AI output may be inaccurate and is not professional advice. Do not enter information into AI features that you are not permitted to share.
For End Customer personal information, our customer is the controller and directs the processing; Atlas processes it to provide the Service and per our agreement with that customer. If you are an End Customer and want to access, correct, or delete your information, please contact the business you interacted with; we will assist that business as its processor.
Atlas's own applications use first-party cookies and local storage to keep you signed in, remember preferences, and store app data, and use a privacy-preserving, first-party visit measure (a random identifier kept in local storage, with only country-level location derived from network data and no cross-site tracking). We do not use third-party advertising cookies in our own applications. A business that operates a public booking site through the Service may choose to add its own third-party analytics or advertising tools (such as Google Analytics or the Meta pixel) to that site; that is the business's choice and is governed by the business's own privacy notice.
We retain your information, records, and uploaded files for as long as your account is active and for our own business, records, security, and legal purposes — we do not automatically expire or delete them on a timer. The only routine deletion happens when an account is deleted: account deletion is a two-step process (an account is first deactivated and reversible, then can be permanently purged), and a purge deletes the tenant's records and uploaded files — including ID/license images and condition photos — across the platform. Certain records, such as billing and transaction history and security audit logs, are retained afterward as permitted or required by law. You may also ask us to delete specific files, and you can export your data through the Service.
We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit (HTTPS/TLS with HSTS), encryption of sensitive stored fields and uploaded documents, hashed passwords, optional multi-factor authentication, role-based access controls, rate limiting, append-only audit logging, and network and application security controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information.
If we become aware of a security incident affecting personal information, we will investigate and notify affected customers and, where required, regulators and individuals, as and within the time required by applicable law. Where Atlas acts as a processor, we will notify the relevant customer so it can meet its own obligations.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of the sale or sharing of personal information (we do not sell or share it), and to not be discriminated against for exercising these rights. If you are in California, the CCPA/CPRA provides these rights; if you are in the EEA or UK, the GDPR provides rights to access, rectification, erasure, restriction, portability, and objection, and the right to complain to a supervisory authority. To exercise a right, email [email protected]; we will verify your request and respond as required by law. If you are an End Customer, direct your request to the business you interacted with, and we will assist it.
We may send you service, security, billing, and transactional messages, which you cannot opt out of while you have an account. You can opt out of any promotional messages from Atlas using the unsubscribe link. Messages that businesses send to their own End Customers through the Service are controlled by those businesses; recipients can unsubscribe by email or reply STOP to text messages.
The Service is for businesses and is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
We operate primarily in the United States, and information we process is stored and processed in the U.S. and in other countries where we or our sub-processors operate. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S., which may have different data-protection laws; where required, we use appropriate safeguards for such transfers.
We may update this Policy from time to time. If we make material changes, we will notify you by email or in-app notice and update the "Last updated" date above. Your continued use of the Service after changes take effect means you accept the updated Policy.
Atlas Rental.io, Attn: Privacy. Email [email protected] for privacy requests, or [email protected] for general questions. Mailing address: 5473 Blair Rd, Ste 100, PMB 816774, Dallas, Texas 75231-4227.