Get InGet In

Privacy Policy

Last updated: June 15, 2026

Draft — pending legal review. This document is a working draft prepared by Get In and has not yet been reviewed by counsel. It does not constitute legal advice. The final binding version will be posted here before the marketplace goes live. Questions: legal@get-in-car.com.

1. Who we are

Get In operates a peer-to-peer car-sharing marketplace at get-in-car.com. We are the controller of the personal data described in this policy. References to "we", "us", and "our" mean Get In.

2. What we collect

  • Account data: name, email, phone, password hash, profile photo, display name, language and country preference.
  • Identity and eligibility: government-issued ID, selfie, date of birth, driver's licence details, and results of background and driving-record checks performed by our screening partner.
  • Listings and bookings: vehicle details, photos, location, pricing, availability, trip history, mileage, fuel/charge level, and messages between Hosts and Renters.
  • Payments: billing address, payment-method metadata (last four digits, brand, expiry), payout account details for Hosts, transaction history, refunds, and dispute information. Full card numbers are handled by our payments partner, not stored by us.
  • Location and telematics: pickup/return addresses, approximate location during a trip if required by a Host's listing, and any data shared from connected-car integrations you authorise.
  • Communications and support: messages, support tickets, recordings or transcripts of calls you make to support, reviews, ratings, and reports of incidents.
  • Device and usage data: IP address, device identifiers, browser type, pages viewed, referring URLs, and diagnostic logs. Used for security, fraud prevention, and product analytics.

3. How we use it

  • Operate the marketplace, process bookings and payments, and provide customer support.
  • Verify identity, run background and driving-record checks, and decide eligibility to book or host.
  • Detect, investigate, and prevent fraud, abuse, and security incidents.
  • Send transactional messages (booking confirmations, claims, account notices).
  • Send marketing messages where you have opted in or where permitted by law (you can opt out at any time).
  • Improve and personalise the Services, including ranking listings and search results.
  • Comply with legal obligations, respond to lawful requests, and enforce our terms.

Where the GDPR or UK GDPR applies, we rely on: (a) performance of a contract (operating bookings, payments, and accounts); (b) legitimate interests (fraud prevention, security, product analytics, direct marketing of similar services to existing members); (c) consent (non-essential cookies, marketing in jurisdictions that require opt-in, optional location features); and (d) legal obligation (tax, accounting, and law-enforcement requests). You may withdraw consent at any time without affecting prior processing.

5. Who we share it with

  • Other members: Hosts and Renters see the information needed to complete a booking (display name, photo, messages, pickup location, vehicle and trip details). Reviews and public profile fields are visible to the community.
  • Service providers: Stripe (payments and identity verification), Checkr (background and motor-vehicle-record checks), Supabase (database and authentication), Resend (transactional email), Google Maps (geocoding and maps), and analytics and error-monitoring providers. Each is contractually bound to use personal data only as instructed.
  • Insurance and protection partners: where you open a claim or where required to administer protection products.
  • Law enforcement and regulators: when legally required, when necessary to investigate fraud or safety incidents, or to enforce our terms.
  • Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information for money.

6. International transfers

We process data in the United States, the European Economic Area, and other countries where our providers operate. Where we transfer personal data outside your home jurisdiction, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and adequacy decisions.

7. How long we keep it

We keep personal data for as long as you maintain an account, plus the period required by tax, accounting, anti-fraud, safety, and legal obligations (typically up to seven years for transaction records). Background-check results and identity documents are retained for the period required by the issuing provider and applicable law, and then deleted or anonymised.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. You can exercise most rights by editing your profile or contacting us at privacy@get-in-car.com. You also have the right to lodge a complaint with your local data-protection authority.

9. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, and (with your consent) deliver and measure marketing. You can manage non-essential cookies via the in-app cookie banner and your browser settings.

10. Children

The Services are not directed to people under 18, and we do not knowingly collect personal information from them. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, row-level database access controls, and secret management. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. California (CCPA/CPRA)

California residents have the right to know, delete, correct, and limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. The categories of personal information we collect are described above. We do not sell personal information and we do not share it for cross-context behavioural advertising as defined under the CPRA.

13. Changes

We may update this policy from time to time. We will post the updated version here and, for material changes, notify you by email or in-app.

14. Contact and DPO

Privacy enquiries: privacy@get-in-car.com. EU/UK members may also contact our representative at the same address until a local representative is appointed.