Privacy Policy

CarHostProtect LLC ("CarHostProtect", "we", "our") operates a private members-only information network that lets independent car rental hosts share firsthand experiences about drivers. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices available to you — including drivers who are the subject of a report.

1. Information we collect

a. Information you give us as a member

• Account information: name, email, phone number, business name, password credentials, profile photo, and preferences.
• Payment information: processed by Stripe. We do not store full card numbers on our servers; we receive a customer/subscription identifier and limited billing metadata (last 4, brand, expiration, ZIP).
• Incident reports you submit: incident category, severity rating, description, incident date, and other narrative content.
• Evidence you upload: photographs of damage, rental agreements, communications, police/insurance reports, and other supporting documents.
• Do Not Rent entries: private notes and lists you keep for your own operation.

b. Information about third-party drivers you submit

When you file a report, you supply information about a driver who is typically not a CarHostProtect member. That may include the driver's full name, aliases, driver's license number and issuing state, phone number, email address, vehicle information, and the incident details described above. You represent to us that you obtained this information lawfully in the ordinary course of renting a vehicle to that person and that your report is a truthful firsthand account.

c. Information we collect automatically

• Log data (IP address, user agent, timestamps, pages viewed, search queries you run).
• Device identifiers and cookies necessary for session, security, and fraud prevention.

2. How we use information

• Operate the search, reporting, dispute, and Do Not Rent features.
• Authenticate you, prevent abuse, and enforce our Terms.
• Process subscriptions and prevent payment fraud.
• Send transactional messages (verification, receipts, dispute notices, service updates).
• Investigate reports of inaccurate or retaliatory content.
• Comply with legal obligations and respond to lawful requests.

We do not sell personal information, and we do not use driver-identifying data submitted in reports to serve advertising.

3. Who we share information with (processors)

We share limited information with vetted service providers acting on our behalf:

• Stripe, Inc. — payment processing and subscription billing.
• Our backend host — managed database, authentication, and encrypted file storage for evidence.
• Resend — transactional email delivery (verification, receipts, dispute notifications).

We also share information (a) with other CarHostProtect members through the search feature, in the anonymized/aggregated form described in Section 4; (b) with law enforcement when required by a valid legal process; and (c) with our professional advisors under confidentiality.

4. What other members can see

Members who search for a driver see only aggregated signals about that driver: the number of reports, the number of distinct reporters, the maximum severity, the categories of the reports, and — for subscribers — the report narratives and evidence. The identity of the reporter is never revealed to other members.

5. Rights of drivers who are not members

If you are a driver and you believe a report on this service concerns you, you can request access to what is on file, dispute its accuracy, or request removal, at any time. Submit a request through our public dispute form:

carhostprotect.com/dispute

You do not need an account to file a dispute. We will acknowledge the request, contact the original reporter where appropriate, and mark the report as disputed during review. Disputed reports are hidden from the aggregated match count while under review. We will delete a report if the reporter withdraws it, if we determine it was submitted in bad faith, or if it cannot reasonably be substantiated.

6. Sensitive identifiers (driver's license numbers)

We treat driver's license numbers as sensitive. They are normalized (uppercased, whitespace/dashes removed) and used only as a lookup key. License numbers are not displayed in search results — only the state and a match indicator. Access to raw license data is restricted to server-side, security-definer database functions and authorized administrators investigating disputes.

7. Security

Data is transmitted over TLS and encrypted at rest by our backend host. Evidence files live in private storage buckets with per-user access rules, and cross-member viewing of evidence happens only through short-lived signed URLs generated by a server-side function. No system is perfectly secure; you are responsible for keeping your account credentials confidential.

8. Retention

• Account records: kept while your account is active and for up to 24 months after closure for fraud, tax, and dispute-resolution purposes.
• Reports and evidence: kept for up to 60 months from submission, unless removed sooner through a successful dispute or reporter withdrawal.
• Search logs: kept for up to 12 months for rate-limiting and abuse detection.
• Payment records: kept for the period required by applicable tax and financial regulations.

9. Breach notification

If we confirm that personal information under our control was accessed or acquired without authorization in a way that creates a risk of harm, we will notify affected individuals and applicable regulators without undue delay, in accordance with applicable law. Notifications will be sent to the email address on file (for members) and, for drivers named in reports, through the reporter of record where we have no direct contact.

10. Children

CarHostProtect is not intended for anyone under the age of 18. We do not knowingly collect information from minors.

11. Changes

We will post material changes to this policy on this page and, where required, notify members by email. Continued use of the service after the effective date constitutes acceptance.

12. Contact

Privacy questions and requests: privacy@carhostprotect.com
Mailing address available on request.