Privacy Policy

1. Scope

This policy covers liberlane.com and bookings made directly with Liber Lane. We also list the same cars on Turo. If you book through Turo, Turo's own privacy policy governs what Turo collects. We receive only the limited trip details described in section 3 so our calendar stays accurate.

2. Information you give us

Sign-in and profile

• Sign in with Google: we receive your name, email address, whether Google has verified that email, and an account identifier. See section 5 for details.
• Sign in with Microsoft (when offered): the same items from your Microsoft account.
• Email profile form: your name, email address, and, if you choose, a phone number and a referral code.
• Every profile gets its own referral code. We record who referred you, if anyone.

Driver identity verification

• Before your first confirmed booking you upload a photo or PDF of a government ID, such as a driver's license. A selfie is optional.
• We store these files on our private server storage (not on the public website) and record the review status (pending, approved, or rejected), the review time, and any note the host writes.
• The host reviews them by hand. We do not send your ID to an outside verification or background-check service.

Bookings

• The car, dates and times, the pickup or delivery spot you choose, your phone number for the trip, and the price breakdown (nightly prices, discounts, promos, zone fees, and credits applied).
• The booking policy and rental agreement text you accepted, and the time you accepted it.
• Trip events: pickup and return times, and status such as completed, no-show, or late return, with any fee lines.
• Invoices after the trip for charging (kilowatt-hours or a dollar amount) and tolls, and whether each was sent or paid.

Trip check-in, damage photos, and messages

• Pickup check-in: a photo or PDF of your insurance card and one to three photos of you.
• Damage checklist: photos of the front and rear corners, wheels, interior, and windshield at pickup and at return, with the time each was saved, who uploaded it (you or the host), and an optional note. The host may add photos of the same spots.
• Messages you and the host exchange on the trip page. Messages stay in the app; they are not sent by email.

Payments

• Card holds and deposits are processed by Stripe on Stripe's own checkout page. Your card number goes to Stripe, not to us. We store the hold amount, its status (for example authorized, released, or captured), and Stripe's reference numbers for the checkout and payment.
• We give Stripe your email address and the booking reference for the hold.
• [CONFIRM: how the trip price, charging and toll invoices, and fees are actually collected (Stripe, another processor, or offline). The app records them as paid or unpaid but only the security hold runs through Stripe today.]

3. Information we collect automatically or from others

• Cookies that keep you signed in (section 7). We do not use analytics, advertising, or social-media tracking cookies or pixels.
• Server logs. Our hosting provider records standard request data such as IP address, browser type, the page requested, and the time. We use it to keep the site running and secure.
• Map tiles. The pickup map loads map images from OpenFreeMap and OpenStreetMap tile servers, which receive your IP address and browser details like any website you load content from. The map does not ask for or use your device location.
• Turo trips. When you book one of our cars on Turo, Turo emails the host. Our system reads those Turo notification emails from the host's own mailbox (read-only access, limited to a Turo label) and keeps the reservation number, the trip dates, the vehicle, and the guest name as it appears in the email. We use this only to block the calendar and avoid double bookings. Turo guests do not need a Liber Lane account.

4. How we use information

• Create and secure your profile and sign you in.
• Confirm that each renter is who they say they are and holds a valid license before a booking is confirmed.
• Quote prices, take and manage bookings, keep the shared calendar accurate, and run pickup and return.
• Place, release, or capture security holds; bill charging, tolls, and any no-show or late-return fee described in the Terms.
• Document vehicle condition, and handle damage, insurance, toll, ticket, or other claims connected to your trip.
• Communicate with you about your trip through the trip page.
• Apply referral credits and promotions.
• Protect our vehicles, our renters, and the site, prevent fraud, and meet legal, tax, and accounting obligations.

We do not use your information for advertising, and we do not make automated decisions about you that have legal or similarly significant effects. The host personally reviews every ID.

5. Google user data

This section describes how Liber Lane handles information it receives from your Google Account when you choose "Continue with Google."

What we access

• Sign-in requests only the basic OpenID Connect scopes: openid, email, and profile. We do not request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google service data.
• With those scopes Google shares your name, email address, whether the email is verified, a unique account identifier, and your profile picture.
• Sign-in passes through our own sign-in service (a Keycloak server that we operate on our hosting provider), which receives these items from Google and passes them to the Liber Lane app.

How we use it

• Your name and verified email create or open your Liber Lane renter profile and appear on your bookings. A verified email is also how a Google sign-in and a Microsoft sign-in with the same address open the same profile.
• The account identifier lets us recognize you on later sign-ins.
• We do not store or display your Google profile picture in the Liber Lane app. [CONFIRM: whether the Keycloak sign-in service is configured to keep the picture attribute; by default the app ignores it.]
• We use Google user data only to provide sign-in and your account. We do not use it for advertising, and we do not use it to develop, improve, or train generalized artificial-intelligence or machine-learning models.

Sharing

• We do not sell Google user data.
• We do not share or transfer it with anyone except the service providers that host and run Liber Lane (section 6), and only to operate the site, or when required by law.
• Humans at Liber Lane view it only to run your bookings, for security, to follow the law, or when you ask for help.

Deleting your data

• To delete your account and the Google user data we hold, email francisco.whittaker@gmail.com [CONFIRM: contact email for privacy and rental questions; defaulted to francisco.whittaker@gmail.com] from the address on your profile. We will delete your profile, linked sign-in identities, and sessions, and the ID and selfie files, within [CONFIRM: deletion turnaround, e.g. 30 days], except records we must keep (section 8). [CONFIRM: the app has no self-service delete button today; deletion is done by the host on request.]
• You can also remove Liber Lane's access at any time from your Google Account under Security, then Third-party apps and services. Removing access stops future sign-ins with Google but does not by itself delete what we already hold, so email us as well.

Liber Lane's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Who we share information with

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:

• Railway, our hosting provider. It runs the website, the database, the private file storage for IDs and photos, and our sign-in service.
• Google and Microsoft, only to sign you in when you choose them.
• Stripe, to process card holds and deposits.
• Google Maps Platform (Distance Matrix), to estimate drive time and distance for delivery zones and quotes. We send map coordinates, not your name. Today those coordinates are the host's base and pickup or delivery spots. If you give us a delivery address, its coordinates may be sent to Google for the same purpose. [CONFIRM: renter-entered delivery addresses are not collected in the app yet; keep or remove this sentence.]
• Turo: we do not share direct-booking renter information with Turo. When you book directly, the host blocks the dates on Turo by hand; only the dates are involved.
• Insurers, claims adjusters, toll authorities, parking or traffic authorities, and repair shops, when needed to handle damage, a claim, a toll, a ticket, or a violation tied to your trip.
• Law enforcement, courts, or others when the law requires it, or when needed to protect people, our vehicles, or our rights, including recovering a car that is not returned.
• A buyer or successor if the business is sold or reorganized, under this policy.

7. Cookies

We use only cookies needed to sign in and keep you signed in. They are marked HttpOnly (page scripts cannot read them) and, on the live site, Secure.

• renter_session: keeps a renter signed in. Lasts up to 30 days or until you sign out.
• ll_oidc_flow: protects a Google or Microsoft sign-in in progress. Lasts up to 10 minutes.
• host_session and host_oauth_state: used only for the owner's admin sign-in.
• Our sign-in service sets its own session cookies on its domain while you sign in.

We do not use analytics, advertising, or third-party tracking cookies. Because we do not track you across sites, we do not change behavior for browser Do Not Track signals. Blocking our cookies will prevent sign-in.

8. How long we keep information

• Profile, sign-in identities, and referral records: while your account is open, and deleted on request.
• Government ID and selfie files: [CONFIRM: retention period, e.g. deleted N days after your last trip or on request].
• Bookings, invoices, payments, fees, accepted terms, check-in and damage photos, and messages: [CONFIRM: retention period, e.g. 3 years after the trip], for taxes, accounting, and claims, or longer if a claim or dispute is open.
• Sign-in sessions expire automatically (30 days for renters).
• [CONFIRM: the app does not delete any of these automatically today; retention is handled by the host.]

9. Security

Uploaded IDs, insurance cards, and photos are stored outside the public website and can be downloaded only by the signed-in host. Sign-in uses industry-standard protocols, and session cookies cannot be read by page scripts. No system is perfectly secure, so we cannot guarantee security.

Your trip page link works without signing in. Anyone who has that link can view the trip, read and send messages, and upload check-in photos, so keep it private.

10. Your choices and rights

• Access, correct, or delete your information: email francisco.whittaker@gmail.com [CONFIRM: contact email for privacy and rental questions; defaulted to francisco.whittaker@gmail.com]. We may need to confirm it is you before acting.
• Phone number and referral code are optional. An approved ID is required to book directly.
• Sign out from the Account or sign-in page at any time.
• Depending on where you live, including Virginia, you may have additional rights under privacy law, such as to confirm, obtain a copy of, correct, or delete personal data, and to appeal a decision. We will honor these requests as required by law. To appeal, reply to our answer with "Appeal" in the subject.

11. Vehicle data

Our cars are connected Teslas. Tesla collects vehicle data under its own privacy policy, and in-car features such as navigation history and paired phones are stored by the car itself. Please sign out of personal accounts and unpair your phone before return.

We may use Tesla's tools to view data about our own vehicles, such as location, battery charge, and odometer, to manage the fleet: to prepare and charge cars, confirm pickup and return, calculate charging, and locate or recover a car that is overdue, stolen, or damaged. Because this is vehicle data, it can show where a car was during your trip. We do not use it to market to you. [CONFIRM: Tesla vehicle telematics is not connected today; keep this paragraph only if it will be enabled, and update section 6 if a fleet-management provider is used.]

12. Children

Liber Lane is not for children. We do not knowingly collect information from anyone under 18, and renters must meet the minimum age in our Terms of Service. If you believe a child gave us information, contact us and we will delete it.

13. Changes

If we change this policy, we will post the new version here with a new effective date. For a material change we will also tell signed-in renters on the site before it takes effect.

14. Contact

• Email: francisco.whittaker@gmail.com [CONFIRM: contact email for privacy and rental questions; defaulted to francisco.whittaker@gmail.com]
• Mail: [CONFIRM: legal entity name, e.g. an LLC, or Francisco Whittaker as a sole proprietor], [CONFIRM: mailing address]