RhodeRides Privacy Policy

RhodeRides is operated by Leeshore Holdings, Inc., a Delaware corporation. We are the data controller responsible for your personal information collected through the RhodeRides platform.

Contact us regarding privacy matters at:

Leeshore Holdings, Inc.
legal@rhoderides.com
rhoderides.com

Information you provide directly:

• Account information — When you create an account through Google Sign-In we receive your name, email address, and profile photo from Google. We also collect your mobile phone number which you provide during onboarding.
• Profile information — Display name, profile photo, bio, location (general RI area), and account type (Individual or Business).
• Business information — If you register as a business Outfitter we collect your business name, business type, and website URL.
• Listing information — Equipment descriptions, photos, pricing, location (zip code and town), and pickup instructions you provide when creating listings.
• Booking information — Rental dates, duration, quantity, and messages exchanged through the platform booking and messaging system.
• Payment information — We do not store your full payment card details. Payment information is collected and processed directly by Stripe. We receive and store only transaction records including amounts, dates, and booking references.
• Communications — Messages sent between Outfitters and Renters through the RhodeRides platform messaging system.
• Legal agreements — Records of your acceptance of our Terms of Service, Renter Waiver, and Outfitter Agreement including timestamps and IP addresses.

Information we collect automatically:

• Usage data — Pages visited, features used, time spent on the platform, and other interaction data.
• Device information — Device type, operating system, browser type, and screen resolution.
• IP address — Your IP address when you access the platform, used for security, fraud prevention, and legal compliance purposes.
• Cookies and similar technologies — We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze platform usage. See Section 9 for more details.

Information we receive from third parties:

• Google — When you sign in with Google we receive your name, email address, and profile photo as authorized by you through Google's OAuth process.
• Stripe — We receive transaction confirmations, payout status, and Stripe account verification status from Stripe for payment processing purposes.
• Twilio — We use Twilio to send SMS notifications. Twilio processes your phone number for message delivery purposes.
• Resend — We use Resend to send email notifications. Resend processes your email address for message delivery purposes.

We use the information we collect for the following purposes:

To operate the platform:

• Create and manage your account
• Display listings to potential Renters
• Process booking requests and confirmations
• Facilitate payments between Renters and Outfitters
• Send booking confirmations, payment receipts, and pickup instructions
• Enable messaging between Outfitters and Renters

To send notifications:

• Email notifications for booking requests, confirmations, cancellations, and payments
• SMS notifications for booking requests, confirmations, and cancellations
• In-app notifications for platform activity
• You can manage notification preferences in your account settings

For safety and security:

• Verify user identity and prevent fraud
• Monitor platform communications for prohibited conduct
• Investigate reports of policy violations
• Maintain records of legal agreement acceptances
• Store IP addresses for security and legal compliance purposes

For legal compliance:

• Comply with applicable laws and regulations
• Respond to lawful requests from law enforcement and government authorities
• Generate required tax documentation including 1099-K forms for qualifying Outfitters
• Enforce our Terms of Service and other platform policies

To improve the platform:

• Analyze usage patterns to improve features and user experience
• Debug technical issues
• Develop new features and services

For communications:

• Respond to your support requests and inquiries
• Send important platform updates and policy changes
• Send marketing communications if you have opted in (you can opt out at any time)

We do not sell your personal information to third parties. We share your information only in the following circumstances:

With other users:

• Your public profile information (display name, profile photo, member since date, account type badge) is visible to other platform users
• Your listing information including equipment details, photos, pricing, and general location (town name only — never exact address or zip code) is publicly visible
• Your pickup instructions are shared only with Renters who have confirmed and paid bookings — never publicly
• Your email address and phone number are never shared publicly or with other users

With service providers:

We share information with trusted third party service providers who help us operate the platform:

• Stripe — payment processing and outfitter payout management
• Twilio — SMS notification delivery
• Resend — email notification delivery
• Supabase — database hosting and infrastructure
• Lovable/Cloudflare — platform hosting and infrastructure

All service providers are contractually required to use your information only as necessary to provide their services and to maintain appropriate security measures.

For legal reasons:

We may disclose your information if we believe disclosure is necessary to:

• Comply with applicable law or legal process
• Respond to lawful requests from law enforcement or government authorities
• Protect the rights, property, or safety of RhodeRides, our users, or the public
• Enforce our Terms of Service

In connection with business transfers:

If Leeshore Holdings, Inc. is involved in a merger, acquisition, or sale of assets your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

With your consent:

We may share your information for other purposes with your explicit consent.

We retain your personal information for as long as necessary to provide the platform services and comply with our legal obligations:

• Account information — Retained for the duration of your account and for 3 years after account deletion for legal compliance purposes
• Booking records — Retained for 7 years for tax and legal compliance purposes
• Payment records — Retained for 7 years as required by financial regulations
• Legal agreement acceptances — Retained permanently as legal records
• Platform messages — Retained for 3 years after the relevant booking
• IP address logs — Retained for 12 months for security purposes

When your information is no longer needed we securely delete or anonymize it.

You have the following rights regarding your personal information:

Access and portability:

You can request a copy of the personal information we hold about you by contacting legal@rhoderides.com. We will respond within 30 days.

Correction:

You can update most of your personal information directly through your account settings. For information you cannot update yourself contact support@rhoderides.com.

Deletion:

You can request deletion of your account and associated personal information through your account settings or by contacting support@rhoderides.com. Note that we may retain certain information as required by law or for legitimate business purposes as described in Section 5.

Notification preferences:

You can manage your email and SMS notification preferences through your account settings at any time.

Cookies:

You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

Marketing communications:

You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting support@rhoderides.com.

The RhodeRides platform is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 we will take steps to delete that information promptly. If you believe we have collected information from a child under 18 please contact us at legal@rhoderides.com.

We take the security of your personal information seriously and implement industry standard security measures including:

• Encryption of data in transit using HTTPS/TLS
• Encryption of sensitive data at rest
• Row-level security policies on our database restricting access to authorized users only
• Regular security reviews and vulnerability assessments
• Limited employee access to personal information on a need-to-know basis
• Secure handling of API keys and credentials through environment variable management

However no security measure is 100% secure. We cannot guarantee the absolute security of your information and you use the platform at your own risk. If you believe your account has been compromised please contact us immediately at support@rhoderides.com.

We use the following types of cookies and similar technologies:

Essential cookies:

Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. You cannot opt out of essential cookies.

Functional cookies:

Remember your preferences and settings to improve your experience. You can disable these through your browser settings but some platform features may not work correctly.

Analytics cookies:

Help us understand how users interact with the platform so we can improve it. We use anonymized analytics data and do not sell this data to third parties.

We do not use advertising or tracking cookies. We do not serve third party advertisements on the platform.

The RhodeRides platform may contain links to third party websites including Stripe's payment pages and outfitter websites. These third party sites have their own privacy policies and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party sites you visit.

Payment processing on RhodeRides is handled by Stripe. When you make a payment or set up a payout account your financial information is collected and processed directly by Stripe subject to Stripe's Privacy Policy available at stripe.com/privacy. RhodeRides does not store your full payment card details or bank account numbers.

SMS:

By providing your phone number and using the platform you consent to receive transactional SMS messages from RhodeRides regarding your bookings, payments, and account activity. Message and data rates may apply. You can opt out of SMS notifications through your account settings. SMS messages are sent through Twilio and are subject to Twilio's privacy policy.

Email:

By creating an account you consent to receive transactional emails from RhodeRides at notifications@rhoderides.com regarding your bookings, payments, and account activity. You can manage email preferences through your account settings. Emails are sent through Resend and are subject to Resend's privacy policy.

If you are a California resident you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, share, and sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale of your personal information — Note: RhodeRides does not sell personal information
• The right to non-discrimination for exercising your CCPA rights

To exercise your California privacy rights contact us at legal@rhoderides.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Sending an email to your registered email address
• Displaying a prominent notice on the platform
• Updating the "Last updated" date at the top of this policy

Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated policy you must stop using the platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices please contact us at:

Leeshore Holdings, Inc.
Privacy inquiries: legal@rhoderides.com
General support: support@rhoderides.com
Website: rhoderides.com

We will respond to all privacy inquiries within 30 days.