Privacy Policy - HydCineRentals

Last Updated: April 2026

At HydCineRentals, we take your privacy seriously. This policy explains what information we collect across our website, mobile app, and partner services — how we use it, how we protect it, and your rights.

1. Information We Collect

A. Account Information

When you create a HydCineRentals account, we collect your email address and a hashed password. Account data is stored securely via Supabase Auth. We do not store plaintext passwords.

B. Usage & Interaction Data

Pages visited, equipment viewed, search queries entered, and filters applied.
Items added to your Shoot List (cart).
Search history stored locally in your browser's localStorage (never sent to our servers unless you are logged in).
Sponsored listing impressions and interactions (click tracking for analytics).

C. Messaging Data

When you use HydCineRentals' in-app messaging to contact a rental house, the content of those messages is stored in our Supabase database. Messages may be accessed in the event of a dispute, a safety concern, or as required by law.

D. Device & Technical Data

IP address, browser type, operating system, and device identifiers for security and analytics.
Mobile app: device model, OS version, and push notification tokens (for delivering inquiry and message notifications).

E. Location Data

If you enable location access on the website or mobile app, we use your device's GPS coordinates solely to sort nearby equipment and rental houses within your current session. We do not store, log, or share your location data on our servers.

F. Partner Data (Rental Houses)

Partners using the Partner Portal or Partner Mobile App provide business information including business name, contact details, equipment inventory, pricing, and photos. This data is displayed publicly on the platform as part of their listing.

2. How We Use Your Information

To operate, maintain, and improve the platform and mobile apps.
To authenticate your account and keep it secure.
To enable real-time messaging between filmmakers and rental houses.
To deliver push notifications about your inquiries and messages (mobile app only, with your permission).
To personalise your experience — remembering your preferences, search history (locally), and Shoot List.
To measure platform performance and understand which features are most useful.
To detect and prevent fraud, abuse, or security threats.
To respond to your support requests or legal inquiries.

3. Cookies & Local Storage

We use cookies and browser localStorage for the following purposes:

Shoot List (Cart): Your saved equipment selections are persisted in local state to survive page refreshes.
Search History: Your recent searches are stored in localStorage for convenience. This data stays on your device and is never transmitted to our servers.
Authentication Session: A secure session cookie is used to keep you logged in across visits.
Analytics: We may use anonymised usage analytics to understand platform behaviour. We do not use third-party advertising cookies.

You can clear your browser cookies and localStorage at any time in your browser settings.

4. Push Notifications (Mobile App)

If you use the HydCineRentals mobile app and grant notification permissions, we store your device's push token in our database to deliver in-app notifications such as new messages or inquiry responses. You can revoke this permission at any time from your device's notification settings, and your push token will be removed from our servers upon next sign-in.

5. Sponsored Listings

Rental houses may pay for sponsored placements to appear at the top of search results. These listings are clearly labelled "Sponsored." Clicks and impressions on sponsored listings may be tracked for billing and performance reporting to the respective partner. This data is anonymised and not linked to individual user identities.

6. Third-Party Services

HydCineRentals uses the following third-party services that may process data on our behalf:

Supabase — database, authentication, and real-time messaging infrastructure.
Vercel — website hosting and edge delivery.
Expo / FCM / APNs — push notification delivery for mobile apps.

Each of these services has its own privacy policy. Our platform links to external rental house contact methods (WhatsApp, phone, email). We are not responsible for the privacy practices of any third-party site or service you access from our platform.

7. Data Retention

Account data is retained for as long as your account is active.
Message history is retained for up to 2 years for dispute resolution purposes, then deleted.
Anonymised analytics data may be retained indefinitely.
Deleted accounts have their personal data removed within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data via your account settings.
Delete your account and associated personal data by contacting us.
Withdraw consent for push notifications or location access at any time via device settings.
Export your data by requesting a copy at privacy@hydcinerentals.com.

9. Children's Privacy

HydCineRentals is intended for professional filmmakers and production teams. Our platform is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13.

10. Changes to This Policy

We may update this Privacy Policy when significant new features are launched or when required by law. We will notify registered users of material changes by email or an in-app notice. The "Last Updated" date at the top of this page will always reflect the most recent revision.

11. Contact Us

For any privacy-related questions, data requests, or concerns, contact us at privacy@hydcinerentals.com.