Privacy Policy

Effective date: April 30, 2026

This Privacy Policy describes how the Rental Webhook ("the App"), operated by Elliott Jempty ("we," "us," or "the Operator"), collects, uses, and protects information when a renter signs a DocuSeal rental agreement and when the App accesses the Operator's own Google account to record that rental.

1. Scope of this app

The App is a private business automation tool used solely by the Operator to manage their own trailer and equipment rental records. It is not a consumer product. Renters do not create accounts in the App. They interact only with the rental contract itself.

2. Information we collect

The App processes the following data:

Information from the rental contract — renter name, phone number, email address, selected equipment, pickup and return dates and times, rental price, deposit, total, payment method, and signature timestamps. This information is provided by the renter when they sign the rental agreement.
Information from the Operator's Google account — the App authenticates as the Operator (not the renter) using OAuth 2.0 and writes the data above into the Operator's own Google services. The App does not read or collect personal data belonging to the Operator's other Google contacts, files, calendar events, or sheets.
Payment information — when a renter selects credit-card payment, the App creates a Stripe invoice for the rental. Card details are entered directly on Stripe's secure hosted page. The App never receives or stores card numbers.

3. Google API services accessed

The App uses the following Google API scopes against the Operator's own account:

https://www.googleapis.com/auth/spreadsheets — to append a single row per signed rental into a private Google Sheet owned by the Operator. The App does not read other rows or other sheets.
https://www.googleapis.com/auth/calendar — to create a calendar event in a "Rentals" calendar owned by the Operator, covering the rental window. The App does not read other calendars or existing events.
https://www.googleapis.com/auth/contacts — to save the renter as a new contact entry in the Operator's Google Contacts. The App does not read or modify the Operator's other contacts.
https://www.googleapis.com/auth/drive — to upload a single vCard (.vcf) backup file into a dedicated "Rental Contacts" folder in the Operator's Google Drive. The App does not browse, download, or modify any other files.

Google API Services User Data Policy — Limited Use disclosure. Rental Webhook's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising. We do not sell Google user data. We do not allow humans to read Google user data, except (a) with the affected user's affirmative agreement, (b) where necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized.

4. How we use information

The App uses renter information solely to:

Record the rental in the Operator's private business systems;
Create a calendar reminder for the rental window;
Generate and email a Stripe invoice when card payment is selected;
Maintain a contact record for future rental coordination.

We do not use renter information for advertising, profiling, marketing unrelated to the rental, or any purpose beyond fulfilling the signed rental agreement and the Operator's record-keeping obligations.

5. Sharing

We do not sell renter information. We do not share renter information with third parties except:

Google — as the platform hosting the Operator's spreadsheet, calendar, contacts, and Drive folder.
Stripe — when card payment is selected, to create and email the invoice. Stripe's privacy policy governs that processing: stripe.com/privacy.
DocuSeal — the platform on which the rental agreement is signed. DocuSeal's privacy policy governs the contract signing flow.
Law enforcement or legal authorities — only when compelled by valid legal process.

6. Retention

Rental records are retained in the Operator's Google Sheets, Calendar, Contacts, and Drive for as long as the Operator deems them necessary for business and tax purposes. Renters may request deletion of their record from those systems by contacting the Operator at the address below.

7. Security

The App runs on a private server controlled by the Operator. Credentials for Google and Stripe are stored as environment variables. Communication with Google and Stripe APIs uses HTTPS. The App enforces a request size limit and rejects non-JSON traffic.

8. Your choices

Renters who wish to access, correct, or delete information held about them may contact the Operator using the address below. If you are the Operator and wish to revoke the App's access to your own Google account, you may do so at any time at myaccount.google.com/permissions.

9. Children

The App is not directed to children under 13 and does not knowingly collect information from them.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

11. Contact

Questions or requests regarding this policy:
Elliott Jempty
elliottjempty@gmail.com