Privacy Policy

Last updated: 2026-10-15

1. Who we are and what this policy covers

OOASY is operated by Oosy LLC, located in New Jersey, United States. This policy covers the OOASY platform website, account registration and sign-in, administrative dashboard, support and platform services.

Rental companies independently control the customer information they enter into OOASY and the transactions on their rental websites. We process that information to provide the service to them. A rental company's rental agreement and privacy practices also apply to its customers. Contact the rental company about its collection or use of your rental information; contact us about OOASY account or platform privacy.

2. Information we collect

• Account information: name, email address, password credentials, profile information, role, company membership and account preferences. Passwords are stored as hashes, rather than readable passwords.
• Business and rental information: company details, contact information, fleet records, locations, rates, reservations, customer details, uploaded documents, rental inspections, invoices, agreements, payment status and transaction references, as provided by you or your rental company.
• Support information: tickets, messages, attachments and communications you send to us.
• Technical information: IP addresses, request and security logs, browser/device information and necessary authentication or session data generated when you use the service.
• Public website content: company branding, vehicle photos, descriptions, prices and contact details that the company chooses to publish.

3. Google sign-in: access, use, storage and sharing

If you choose Continue with Google, OOASY requests the openid, email and profile permissions. Google provides basic identity information, including your name, email address and profile information. Our current implementation uses your name and email address to create or locate your OOASY account and verify sign-in. We do not import your Google profile picture into your OOASY profile.

Google authorization credentials are used on the server to complete sign-in. Our current implementation does not save Google access or refresh tokens to your user account for ongoing access to Google services. We store the name and email address needed for your OOASY account and issue a separate OOASY session token.

We use Google-derived account information for authentication, account administration, transactional account messages, support and protecting access. It is handled by our hosting and operational providers as necessary to provide these functions. We do not sell Google user data, use it for advertising, or transfer it to data brokers. We do not use Google user data to train generalized artificial intelligence or machine learning models.

OOASY's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

You can stop using Google sign-in and remove OOASY access through your Google Account connections. Removing access does not itself delete your OOASY account or business records. To delete those, use the account deletion process below. If you need another way to sign in, use password recovery for your OOASY email or contact support.

4. Why we use information

We use information to create and secure accounts; provide fleet, reservation, invoicing and website features; process subscription and payment-related operations; send account, reservation and service notices; respond to support and privacy requests; prevent fraud and abuse; maintain and troubleshoot the service; and meet applicable legal obligations. Where privacy law requires a legal basis, these activities rely on performance of a contract, legitimate interests, legal obligations or consent, as applicable.

5. Sharing and service providers

Information is available to authorized members of the relevant rental company according to their permissions, and to OOASY personnel when needed for operations, support, security or legal obligations. Public website content is visible to website visitors. Do not put identity documents or other private information in public website or vehicle-image fields.

We use operational providers for hosting, storage, email delivery and payments. These include Cloudflare for media storage and delivery, Resend for configured email delivery, Google for optional sign-in and map-related features, and Stripe for configured subscription and payment processing. Other payment integrations, such as Square or PayPal, may apply when enabled. Those providers process information under their own terms and privacy policies as well as their service arrangements.

Online payment details are handled through the applicable payment provider. OOASY stores operational payment information such as payment status, amounts and provider references; it does not store full payment-card numbers or card security codes. We may disclose information when legally required, to protect rights and safety, or as part of a business transfer subject to appropriate privacy protections.

6. Cookies and local storage

OOASY uses cookies and browser storage for necessary functions such as sign-in, session security and preferences. Some account tokens and preferences remain in browser storage until sign-out or removal. Third-party maps, embedded media, payment components and sign-in services may use their own storage and receive technical information when loaded. Blocking necessary storage may prevent sign-in or other features from working. You can clear website data using your browser settings.

7. Security

We use access controls, company-based authorization, hashed passwords and separate private document storage to protect information. Customer documents are served through authenticated access rather than as public media. Public company and vehicle images use public media delivery. No service can guarantee absolute security; protect your credentials and promptly report suspected unauthorized access to [email protected].

8. Retention and account deletion

We retain information while it is needed to operate your account and provide the service, resolve disputes, maintain security and meet applicable legal or accounting obligations. Retention depends on the type of record, its purpose and applicable requirements; there is no single retention period for all information.

You can request personal account deletion or company closure at Account deletion, without signing in, including for suspended accounts. We verify the account email before taking action. Personal account deletion does not delete the company's records or other members. The last company owner must transfer ownership or request company closure.

Verified company closure disables workspace access and initiates cancellation of the OOASY subscription. Permanent deletion is reviewed for outstanding reservations, invoices, disputes and legal retention requirements. We communicate any records that must be retained and the applicable period. Separate payment-provider accounts are not deleted by closing OOASY. Restricted backup copies are removed through the applicable backup retention process and may remain temporarily after active-system deletion.

9. Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, export or delete personal information, restrict or object to processing, or withdraw consent. Update available profile settings directly or email [email protected]. We may need to verify your identity and authority before responding. Requests about a rental company's customer records may need to be directed to that company. You may also complain to the relevant privacy authority where applicable.

10. International processing and children

OOASY is operated from the United States. Our providers may process information in the United States and other countries where they operate. Where required, appropriate safeguards apply to international transfers. OOASY is a business service and is not intended for children under 18. Contact us if you believe a child has provided personal information to OOASY.

11. Changes to this policy

We may update this policy as the service or applicable requirements change. The date above identifies the latest version. We will provide additional notice of material changes when required.

12. Contact

For privacy questions or requests, contact Oosy LLC (OOASY), New Jersey, United States, at [email protected]. Please include “Privacy request” in the subject and do not send passwords, card details or identity documents unless we provide a suitable secure process.