Rently Privacy Policy

Last updated: September 24, 2026

This policy describes how Rently ("the App") collects, uses and shares personal data when a merchant installs it on a Shopify store, and when that store's customers book rentals through it.

Who we are

Rently is operated by Konspire Creative s.r.o., 5. května 1007/3, 140 00 Praha 4 – Nusle, Czech Republic, company ID (IČO) 21515972, VAT ID CZ21515972, registered in the Commercial Register kept by the Municipal Court in Prague, file C 403096. For the data a merchant's customers provide at checkout, the merchant is the controller and we act as a processor on the merchant's behalf. For merchant account data, we are the controller.

Data we collect

• Store data: the store's myshopify domain, timezone, currency, selected Rently plan, and the rental settings the merchant saves (daily rate, rental length limits, units available to rent, calendar appearance).
• Authentication data: the Shopify access token and, for the staff member who opens the App, their Shopify user ID, name, email address and locale, as provided by Shopify when the App is opened.
• Booking data: for every order that contains a rental, the Shopify order ID and number, rented product, rental dates, number of units, rental price, booking status, and the customer's name and email address.
• Product data: product and variant IDs, titles and inventory levels of the products the merchant turns rentals on for.

We do not collect payment card details. Payments for orders and for Rently plans are processed by Shopify.

How we use the data

• To show rental availability on the storefront and prevent double bookings.
• To price rentals in the cart and record bookings when orders are placed.
• To show bookings and their statuses to the merchant in the Shopify admin.
• To manage the merchant's Rently plan and provide support.

The legal basis is the performance of our contract with the merchant (GDPR Art. 6(1)(b)) and, for support and security, our legitimate interests (Art. 6(1)(f)). We do not sell personal data, use it for advertising, or make automated decisions with legal effects.

Sharing and storage

Data is stored in a database and job queue on servers operated by DigitalOcean, LLC in the United States (New York). This transfer outside the European Economic Area is covered by the Standard Contractual Clauses in DigitalOcean's Data Processing Agreement. Data is exchanged with Shopify through its APIs to provide the App. We share data with no other third parties, except where required by law.

Retention

• When the App is uninstalled, access tokens and staff session data are deleted immediately.
• About 48 hours after uninstall, Shopify sends a shop redaction request and we delete all remaining data for that store, including rental settings and bookings.
• When Shopify sends a customer redaction request, we erase that customer's name and email address from the store's bookings. The anonymized booking dates remain for the merchant's records until the store data is deleted.

Your rights

Under the GDPR and similar laws you can request access to, correction, deletion or export of your personal data, object to or restrict its processing, and lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz). Store customers should contact the store they bought from first; Shopify forwards data requests made to the store to us and we respond within 30 days. Merchants and customers can also contact us directly.

Security

Data is transmitted over HTTPS, the database is not exposed to the internet, and access to the servers is restricted to the operator.

Changes

We will post any changes to this policy on this page and update the date above.

Contact

Konspire Creative s.r.o. — v.kondratiev@konspire.cz