Prokat operates in Cyprus (EU) and handles personal data in line with GDPR.
When you create an account: your email address and password (managed securely by our authentication provider, Supabase — we never see or store your plain-text password). Optionally, if you add them: your name and phone number.
If you become a lessor: a payment link (e.g. your Revolut transfer link), the city/area and full pickup address of your items, and photos you upload.
When you make a booking: the dates requested and the total price, computed by our servers.
We never collect or store payment card details or bank account numbers — rent payments happen directly between renter and lessor, outside the platform.
To operate the marketplace: showing your listings, processing bookings, calculating commission, and connecting a renter and a lessor once a booking is confirmed (at which point each side sees the other's pickup address and contact details, and not before).
A public visitor to the catalog sees only an item's city or area — never the full pickup address. Full addresses and mutual contact details are revealed only to the renter and lessor of a confirmed booking, and to platform administrators.
Account and booking data is stored with Supabase; transactional emails (such as approval notices) are sent via Resend. Both providers act as data processors on our behalf.
You can update or remove your name, phone number, and payment link at any time from your account settings. To request deletion of your account and associated data, or to exercise any other GDPR right (access, correction, portability, objection), contact the platform administrator.
See also our Terms of service.