Working draft — this document must be reviewed by a licensed lawyer before public launch.

Rentadeto is operated from Ontario, Canada, and handles personal information under Canada's PIPEDA and applicable US state privacy laws. This policy says what we collect, why, and your choices — in plain language.

Privacy Officer: Daxraj Jadeja, Rentadeto — hello@rentadeto.com. Every access, correction, deletion or complaint request goes to that address and is answered within 30 days.

Age check data

To confirm you are 18 or older we ask for a photo of a government ID and a selfie. We never store these images. They are sent over an encrypted connection to our AI provider, Anthropic PBC (United States), which processes them on our behalf and returns a result; they are not used to train AI models. Because processing happens in the United States, the data is subject to US law, including lawful access by US authorities. Our provider does not retain request content by default, but may retain content flagged by its automated trust-and-safety systems for up to two years — that is outside our control and we disclose it so you can decide with full information.

When a person reviews. If the automated check is unclear, low-confidence, or the photos don't appear to match, your check goes to a Rentadeto reviewer. They do not see your photos — we have not kept them. They see the check's notes and may invite you to a short video call. Nothing uncertain is approved automatically, and no refusal is final until a person has confirmed it.

What we keep. The result only — whether you are 18 or older, the date of the check, the method used, a confidence score, and which reviewer decided if a person was involved. We keep this for as long as your account exists and for 12 months afterwards, as evidence that the check was performed. The confidence score is deleted after 90 days. We also keep a short non-reversible fingerprint of the document image — not the image, and not anything that can be turned back into one — to stop the same document being used to open many accounts.

What this is not. This is an age check, not a background check and not identity verification. We do not run criminal record checks, and we do not verify your name or address against any government or commercial database.

What we collect

Account data: email, display name, date of birth, city.
Age-check result: as described above — the result, never the images.
Platform activity: profiles, messages, bookings, reports, and payment status (card details are handled by our payment processor, never stored by us).
Approved profile photos a companion uploads, and — only if a companion records one for a commissioned “little extra” video message — that video. Both are reviewed by a person before anyone sees them. A commissioned video is stored in a private, access-controlled location and delivered only to the client who paid for it — playable in the app and downloadable as their own copy to keep. There is never a public link. We retain our stored copy only as long as needed to deliver it and handle any dispute, then delete it; a copy the client has downloaded is theirs, like any gift, and is outside our systems — our deletion cannot reach it, and we say so rather than imply otherwise. Chat itself carries text only — no images or video pass through it.

Why we collect it

To run the service; to confirm you are 18 or older; to keep the community safe (including automated screening of messages for solicitation, off-platform payment steering, and under-18 signals, with human review of flags); to process subscriptions; and to meet legal obligations.

Who processes your data for us

ProcessorWhat forWhere
SupabaseDatabase, accounts, file storageCanada (ca-central-1)
VercelWebsite hostingUnited States
Anthropic PBCThe 18+ age check, and message safety screeningUnited States
OpenAIFirst-pass message and photo screeningUnited States
ResendSending emailUnited States
CloudflareDomain and inbound email routingGlobal
SentryError reports (no message or image content)United States
StripePayments and payouts (from launch of payments)United States

Processing outside Canada means your information is subject to the laws of that country, including lawful access by its authorities. We tell you this rather than bury it.

What we never do

We never sell your personal information. We never share your profile outside the platform. We never use your messages for advertising.

Sharing

The processors above, under contract, and authorities where the law requires it — including for suspected crimes against minors or trafficking.

Reviews

If you rate a companion after a date, we store the rating, anything you wrote, and a one-way hash of your account id. That hash is how we count reviewers rather than reviews — so someone who books the same companion twice counts once — and it is not reversible into your identity.

Publicly a review shows the rating, the month, and the words “verified date”. It never shows your name, your first name, a nickname, a photo, or a stable pseudonym. Privately, in their own portal, the companion sees your first name — they were on the date, so we do not pretend otherwise, and the review form says so before you write anything.

Review text is not published to search engines. The companion’s profile page carries only the rating and the count; every review’s words live on a separate page at/companion/{id}/reviews, which we serve with noindex, nofollow. That is the mechanism, not an intention.

Cookies & what we store in your browser

We use no advertising cookies, no cross-site trackers, and no analytics cookies. The complete list of what we put in your browser:

Sign-in cookies keep you logged in and expire when your session does.
A referral cookie (30 days) is set only if you arrive through a companion’s share link, so she gets credit if you subscribe. It contains her profile ID — nothing about you.
Local storage remembers that you’ve seen the first-time tour so we don’t show it twice. It never leaves your device.

Because none of this is tracking, there is no cookie banner to click through — the honest version of “we value your privacy” is not needing one.

Email choices

Marketing and coaching emails carry an unsubscribe link, and one tap stops them. Booking, safety, and account emails (a date confirmed, a report outcome, a password change) keep arriving while you have an account — they are how the protections on this platform reach you.

Your rights

Access, correct, or delete your data by contacting hello@rentadeto.com. Deleting your account removes your profile and messages, except records we must keep for legal and safety purposes (e.g., enforcement history and the age-check result). You may withdraw consent to the age check at any time by deleting your account.

One exception, stated plainly because the sentence above would otherwise mislead you: reviews you wrote about a companion are not deleted with your account. Your account link is removed from them, but the rating and any words stay on that companion’s profile — otherwise a truthful record of a paid booking could be erased by closing an account, and every rating on this platform would mean less. You can withdraw any individual review yourself, at any time, permanently, no questions asked.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada — priv.gc.ca, 1-800-282-1376 — or to your provincial or state privacy regulator.

If you are in the United States

We serve members in the United States, and your information is processed in Canada and the United States by the processors listed above. We give every member the same rights — access, correction, deletion — regardless of which state you live in and regardless of whether a state privacy law technically applies to a company of our size.

On the rights US state laws add: we do not sell or share your personal information for money or for advertising, we do not use it for targeted advertising, and we do not use it for automated profiling with legal effects — so under laws like the California Consumer Privacy Act there is nothing to opt out of. If that ever changed, this policy would say so first and an opt-out would exist before the change took effect. We do not discriminate against anyone for exercising a privacy right. Requests go to hello@rentadeto.com, answered within 30 days; if you are unsatisfied you can also contact your state Attorney General.

Security & retention

Encryption in transit and at rest, least-privilege access, and audit logging. The strongest security control here is the one we designed in: the ID and selfie are never written to disk, so there is no store of them to breach.