Privacy Policy

This policy covers two groups of people:

• Platform users — company owners, administrators, and staff who use DriveHive to manage a car rental business.
• Customers — individuals who book vehicles through a car rental company that uses DriveHive, and who may receive communications through our platform.

We collect information in two ways: information you provide directly and information collected automatically.

Information you provide

• Account information: name, email address, phone number, and password when you create an account.
• Company profile: company name, address, logo, and contact details.
• Customer records: name, email, phone number, identity card or passport number, and driving licence details entered by the rental company for their customers.
• Booking and payment data: rental dates, vehicle details, payment amounts, deposit records, and transaction references.
• Vehicle inspection data: photos and condition notes submitted during pickup and return.
• Identity documents: photos of identification documents uploaded for customer verification.
• Communication preferences: opt-in or opt-out choices for WhatsApp and other notifications.

Information collected automatically

• IP address and browser/device information when you access the platform.
• Usage data such as pages visited, features used, and timestamps.
• Cookies and session tokens necessary to keep you logged in.

We use the information we collect to:

• Provide, operate, and maintain the DriveHive platform and its features.
• Process bookings, payments, deposits, and refunds on behalf of rental companies.
• Send transactional notifications about bookings, payments, and vehicle collection or return.
• Send WhatsApp messages where you have opted in (see Section 5 below).
• Verify customer identity documents submitted through the platform.
• Generate reports and analytics for rental company administrators.
• Maintain audit logs of actions taken within the platform.
• Investigate and resolve disputes, fraud, or policy violations.
• Comply with our legal obligations.

Where applicable law requires a legal basis for processing personal data, we rely on:

• Contractual necessity — to provide the services you or the rental company have contracted for.
• Legitimate interests — for security, fraud prevention, product improvement, and platform administration.
• Consent — for optional communications such as WhatsApp notifications, which you may withdraw at any time.
• Legal obligation — where we are required by law to process or retain certain data.

DriveHive integrates with the Meta WhatsApp Business API to send booking-related notifications to customers on behalf of car rental companies that use our platform.

What we send

WhatsApp messages are sent only for transactional purposes: booking confirmations, payment status updates, pickup and return reminders, deposit refund notices, and similar booking lifecycle events. We do not send marketing messages via WhatsApp.

Opt-in and opt-out

WhatsApp notifications are only sent to customers who have explicitly opted in. You can opt out at any time by contacting the rental company or by replying to a message. Opting out will stop all WhatsApp messages for that company’s bookings.

Data shared with Meta

To deliver WhatsApp messages, your phone number and message content are transmitted to Meta Platforms, Inc. through the WhatsApp Business API. Meta processes this data under their own WhatsApp Business Policy and Meta Privacy Policy.

Inbound messages

If you send a message to a WhatsApp number operated through DriveHive, your phone number and message content are received and stored to enable the rental company to respond and to send you an automated acknowledgement. Inbound messages are not used for marketing.

Message logging

We retain a record of WhatsApp messages sent and received (including delivery status) for audit and dispute resolution purposes. Message logs are accessible only to the relevant rental company’s administrators and DriveHive support staff.

We do not sell your personal data. We share information only as follows:

• Rental companies — customer data entered into or through DriveHive is accessible to the company that manages that customer relationship. DriveHive acts as a data processor on their behalf.
• Service providers — we use third-party providers for hosting (database and file storage), payment processing, email delivery, and messaging (WhatsApp via Meta). These providers process data only as directed by us.
• Meta Platforms, Inc. — phone numbers and message content are shared with Meta when WhatsApp messages are sent or received through the WhatsApp Business API.
• Legal and regulatory authorities — where required by law, court order, or to protect the rights and safety of users or others.

We retain personal data for as long as necessary to provide the services and meet legal obligations:

• Account and booking data is retained for the duration of the account and for up to 7 years after account closure for financial and legal compliance purposes.
• Inspection photos and identity documents are retained for the duration of the rental company’s subscription and for a reasonable period thereafter.
• WhatsApp message logs are retained for up to 2 years.
• Audit logs are retained for up to 7 years.

You may request earlier deletion of your data subject to applicable law and our legal obligations (see Section 9).

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, access controls, and regular security reviews. API credentials (such as WhatsApp access tokens) are stored with access restricted to authorised system processes only.

No system is completely secure. If you believe your account or data has been compromised, please contact us immediately at privacy@drivehive.app.

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete your personal data, subject to our legal obligations.
• Restrict processing of your personal data in certain circumstances.
• Object to processing based on legitimate interests.
• Withdraw consent for communications such as WhatsApp notifications at any time.
• Portability of your personal data in a structured, machine-readable format.

To exercise any of these rights, contact us at privacy@drivehive.app. We will respond within 30 days.

If you are a customer of a car rental company using DriveHive, you may also direct data access or deletion requests to that company directly, as they are the data controller for your booking records.

DriveHive uses cookies and similar technologies strictly for session management (keeping you logged in) and security. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.

DriveHive is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

Your data may be processed and stored in servers located outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or through the platform. Continued use of DriveHive after any update constitutes acceptance of the revised policy.

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at: