Privacy Policy

Connect2Autos ("Connect2Autos," "we," "us," or "our") operates a car rental service in Alexandria, Virginia. This Privacy Policy describes how we collect, use, share, and protect personal information from visitors to our website, users of our booking platform, and customers who rent vehicles from us.

By using our website or renting from us, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of personal information:

Identity & contact. Full name, email address, phone number, mailing address, date of birth.

Driver credentials. Driver's license number, issuing state, expiration date, and a photo of the physical license. For rideshare-program applicants: driving history / MVR reports, insurance certificates, rideshare proof.

Payment. Card details are captured and stored by our PCI-DSS Level 1 payment processor (Sola/Cardknox); we receive only a tokenized reference and the last four digits. We accept alternate methods including Zelle, CashApp, Venmo, and cash — for these, we record the transaction reference only.

Rental history. Reservations, agreements, payments, deposits, damage reports, condition photos, odometer readings, fuel levels, traffic tickets, and any tolls associated with your rental.

Communications. Emails, SMS, chat messages, and phone calls to and from our customer support and AI chat agent.

Device & usage. IP address, browser type, operating system, referring URL, pages viewed, timestamps, and cookie identifiers.

Location. We do not track our vehicles by GPS as of this policy version. If we introduce telematics or GPS tracking, this section will be updated with prior notice.

2. How We Use Your Information

• Provide, process, and manage vehicle rentals and payments
• Verify your identity, age, and driving eligibility
• Authorize deposit holds and post-return charges (damage, fuel, tolls, tickets)
• Send booking confirmations, reminders, receipts, and service messages
• Communicate with you about your account, rentals, and support requests
• Operate our loyalty program and referral credits
• Comply with legal, tax, insurance, and regulatory obligations
• Investigate incidents, prevent fraud, and enforce our Terms
• Improve our services and understand how customers use our website (with your consent for analytics cookies)
• Send marketing communications (only where permitted by law and where you have not opted out)

3. How We Share Your Information

We do not sell your personal information as "sale" is defined under California's CCPA/CPRA or Virginia's VCDPA. We share information only with the following categories of recipients, and only as necessary:

• Payment processors — Sola/Cardknox (US-based, PCI-DSS Level 1) to authorize and settle card charges
• Email & SMS providers — Resend and Twilio to deliver transactional and (with consent) marketing messages
• Cloud infrastructure — Amazon Web Services and Supabase for hosting and encrypted file storage
• Analytics & advertising partners — Google (Analytics, Tag Manager) and Meta (Pixel) for website measurement and ad performance, ONLY after you accept analytics or marketing cookies
• Insurance carriers & claims adjusters — in the event of a collision, theft, or covered loss
• Traffic and parking authorities — Alexandria VA, DC, Arlington County, Prince George's County, and other jurisdictions to identify the responsible renter for a ticket
• Law enforcement & government agencies — when required by subpoena, warrant, or applicable law, or to report a stolen vehicle
• Corporate account administrators — for reservations booked under a corporate account, we share rental details with that account's designated administrator
• Professional advisors — attorneys, auditors, and insurers, under confidentiality obligations
• Business transferees — in connection with a merger, acquisition, or sale of assets, with notice to you

4. Cookies, Analytics & Advertising

Our website uses cookies and similar technologies. Cookies fall into three categories:

Necessary. Required for login, cart, and booking flow. Cannot be disabled — the site will not function without them.

Analytics. Google Analytics and Google Tag Manager. Used to understand which pages are visited and how customers move through our booking flow. Disabled by default; activated only when you accept.

Marketing. Meta Pixel, Google Ads conversion tracking, and remarketing tags. Used to measure the performance of our ads and (with your consent) show you our ads on other websites. Disabled by default; activated only when you accept.

You control your choices through our cookie banner (shown on first visit) and can change them at any time via the "Cookie Preferences" link in the footer of every page.

5. Data Security

We use industry-standard security measures including TLS encryption in transit, encryption at rest for stored data, PCI-DSS-compliant payment tokenization, role-based access controls, and audit logging. No system is perfectly secure — if we discover a breach involving your personal information, we will notify you and applicable regulators as required by Virginia Code § 18.2-186.6 and other applicable law.

6. Data Retention

We retain personal information for as long as your account is active and for the periods below after your last transaction:

• Rental agreements & payment records: minimum 7 years (tax, insurance, and liability defense)
• Driver's license photos: up to 3 years after your last rental, then anonymized
• Damage reports & incident photos: 7 years or the life of any related insurance claim, whichever is longer
• Website analytics data: 26 months (Google Analytics default) or as configured
• Marketing communications preferences: until you opt out or delete your account

7. Your Privacy Rights

Virginia residents (VCDPA). You have the right to:

• Confirm whether we process your personal data and access it
• Correct inaccuracies in the personal data we hold about you
• Delete personal data we hold about you
• Obtain a portable copy of the personal data you provided to us
• Opt out of targeted advertising and the sale of personal data (we do not sell personal data)
• Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects (we do not conduct such profiling)

California residents (CCPA/CPRA). You have the right to know, delete, correct, and opt out of the sale or sharing of your personal information (we do not sell or share personal information for cross-context behavioral advertising). California residents also have the right to limit our use of sensitive personal information (we do not use sensitive personal information for purposes other than providing our services).

All customers, everywhere. You may:

• Update your contact information and preferences in your customer portal
• Unsubscribe from marketing communications using the link in every marketing email
• Request a copy or deletion of your data via the contact below

We will verify your identity before honoring a request (typically by matching to your account email and a recent rental). If we decline a request, we will explain why. You have the right to appeal any denial by replying to our written response.

8. Children

Our services are intended for individuals aged 21 and older (our minimum rental age). We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify active customers by email and update the "Effective date" above. Continued use of our services after the effective date of a revised policy constitutes your acceptance of it.

10. How to Contact Us

For privacy questions, to exercise your rights, or to appeal a decision:
Connect2Autos, Attn: Privacy
2121 Eisenhower Ave, Alexandria, VA 22314
Email: bookings@connect2autos.com
Phone: 571-786-1444