Privacy Notice

This Privacy Notice describes how Alvro LLC collects, uses, shares, and protects personal information when you use our website, mobile apps, and services. It applies to renters, hosts, and visitors to the platform.

Information you provide. Name, email, phone number, date of birth, driver's license details, government ID, payment information, vehicle details (if you list a car), messages, reviews, and any other information you submit.

Information collected automatically. Device identifiers, IP address, browser type, app version, pages viewed, search queries, approximate location, and cookies / similar technologies described in our Cookie Notice.

Information from third parties. Identity verification results, driving-record reports, payment-fraud signals, and information from social logins you choose to connect. Maps on car and search pages are provided by Google, which receives your IP address and the page you are viewing when a map loads.

We use personal information to:

• Operate, maintain, and improve the Alvro platform.
• Verify identities, perform driving-record and fraud checks, and maintain trust and safety.
• Process bookings, payments, payouts, and tax reporting.
• Communicate with you about trips, account activity, and customer support.
• Send marketing communications with your consent or where permitted by law.
• Detect, investigate, and prevent fraud, abuse, and crime.
• Comply with legal obligations and enforce our Terms.

Text messages. If you give us your phone number and agree, we send text messages about your trips, such as confirmations, pickup and return reminders, and security codes. Reply STOP to stop and HELP for help. Message and data rates may apply. We don't use your number for marketing without your agreement.

We share personal information with:

• Other users as needed to facilitate a trip (e.g., your name and photo are shown to your host). Once the time to file a damage claim has passed (72 hours after the trip ends), your host can no longer see your driver's licence or your selfie, you can no longer see the car's exact address, and your host never sees the image of your signature. Photos taken at pickup and return stay on the trip for you and your host.
• Service providers for payment processing, ID verification, customer support, hosting, analytics, and communications.
• Insurance partners to administer protection plans and process claims.
• Law enforcement and authorities when required by law, court order, or to protect rights and safety.
• Successors in connection with a merger, acquisition, or sale of assets, subject to this Notice.

We do not sell your personal information. If you are a California resident, see “Your privacy rights” below.

We keep personal information for as long as your account is active and as needed to provide our services, resolve disputes, enforce our agreements, and meet legal obligations. Trip, payment, and tax records are kept for at least seven years. When you delete your account, we may keep information where the law allows, for example to prevent fraud and abuse, keep people safe, and stop a closed account from being re-opened to get around a restriction. We do not promise that everything is erased.

We use administrative, technical, and physical safeguards designed to protect personal information — including encryption in transit and at rest, access controls, and regular security testing. No system is perfectly secure, so we encourage you to use a strong, unique password and enable two-factor authentication.

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain uses such as direct marketing. Deleting your account removes it from view and from use, but we keep some records as described under Data retention. You can delete your account only when you have no upcoming or in-progress trip and no open claim, dispute, refund or payment, and you owe nothing. The filing windows must also have closed: damage claims must be filed within 72 hours after the trip ends, reimbursement requests within 24 hours after the trip ends, and tickets and citations within 60 days after the trip ends. Travel credit is lost when you delete. A host's earnings are held for staff review rather than paid out automatically. Our staff can restore a deleted account. To exercise these rights, email privacy@alvro.com, or contact support from your account settings to delete your account.

California residents: You have the right to know what personal information we collect, to delete that information, subject to the exceptions the CCPA allows (for example, to detect and prevent fraud, to complete a transaction, or to meet a legal obligation), to correct inaccuracies, and to opt out of any “sale” or “sharing” of personal information as defined under the CCPA. We do not sell personal information.

Alvro is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so we can delete it, except where we must keep a record to prevent fraud or meet the law.

We may update this Privacy Notice from time to time. We will announce material changes at least 30 days before they take effect through the app, email, or this page.

Privacy questions? Email privacy@alvro.com or write to: Alvro LLC, Attn: Privacy, 6219 S. Lone Tree Ave, Boise, Idaho 83709.