1. Who is responsible for your data
DriveEasy Rentals operates the rental website for a business in Morocco. The legal company identity, registered address and privacy contact must be added before this notice is final.
This draft explains the app’s current handling of information. It is not a completed statement of compliance with Moroccan data-protection requirements; the business must review its obligations, including any applicable CNDP formalities and overseas data transfers.
2. Information used by the service
The service uses account and contact information, including your name, email, phone number and address. Reservations include the selected car, dates, locations, protection and extras, pricing and booking status.
Driver details include licence number, birth date, age at pickup, licence issue date and licence country. Change and cancellation requests include your reason, requested changes and the administrator’s decision. Assistant conversations are saved to your account when you use the rental assistant.
3. Why this information is used
Information is used to manage accounts and reservations, check driver eligibility and vehicle availability, prepare reservation documents, handle change requests and provide account notifications.
The business must confirm the applicable legal grounds for each use and any further uses before publishing the final policy. This draft does not authorise marketing or unrelated use of your information.
4. Rental assistant
When you use the assistant, your messages, rental policies and reservation records are sent to the configured AI service so it can answer. Those records can contain contact and driver details, including address, licence number and birth date, as well as rental dates, prices and requests. Conversation history is stored with your account.
Do not include passwords, full payment-card details or unnecessary identity documents in a conversation. AI responses do not approve changes to a reservation. The final policy must identify the active provider and its data-handling arrangements.
5. Service providers and security
The app relies on services for account access, reservation storage, vehicle-photo storage and hosting. Authorised administrators manage rental records and requests.
The production providers, hosting countries, any payment processing and safeguards for data transfers must be confirmed before launch. No claim that data stays only in Morocco is made in this draft.
6. Retention and privacy requests
A retention schedule for accounts, reservations, financial records and assistant conversations has not yet been approved. The final notice must explain the applicable periods and any legal recordkeeping requirements.
The final policy must provide a direct privacy contact and explain how to request access, correction or deletion where applicable. Booking cancellation is not an account-deletion request; some records may need to be retained to meet legal obligations.
7. Browser storage and future changes
The app uses browser storage to support signed-in sessions. A production review must verify all cookies, browser storage and any analytics or marketing tools before the final notice is published.
New providers or purposes must be reflected in this policy. This draft does not state that optional analytics, advertising or payment services are already active.
Details to finalise
Before launch: add the company and privacy contact, confirm lawful grounds, retention periods, providers and hosting countries, review browser storage, and obtain advice on Moroccan privacy and transfer requirements.