Rod Logo

Privacy Policy

Last updated: February 20, 2026

1. Introduction

Our commitment

Rod.tn ('Rod', 'we') protects your privacy. This policy explains how we collect, use, and share your personal data on www.rod.tn.

By creating an account or using our services, you accept this policy and the data practices described here.

Who this applies to

This policy covers everyone who uses the Platform: clients looking to rent a vehicle, and rental agencies registered on Rod.tn.

It does not cover what an agency does with your data once it receives your booking request. At that point, the agency alone is responsible for that data.

Rod.tn's role

Rod.tn is only a technical intermediary. We are not a party to the rental contract between you and the agency. We do not handle payments or take commissions. Our only role is to connect you with professional rental agencies.

2. Who controls your data

The data controller

The data controller for the Platform is the company that operates www.rod.tn , a SaaS platform for vehicle rental in Tunisia.

Rod decides how and why your data is used: account management, sending bookings, security, and marketing.

Contact us

For any question about your data, email us at: contact@rod.tn

Agencies act independently

Once we send your request, the agency receives your data and becomes solely responsible for it. This includes verifying your details and carrying out the contract.

Rod is not responsible for how agencies handle data. Check each agency's own privacy policy for details.

3. What data we collect

Required data

To create an account, we need:

  • First and last name
  • Email address
  • Phone number
  • Tax ID number (only if acting for a business)

Optional data

To speed up your booking, you can also share:

  • National ID number (CIN)
  • Date of birth
  • Driver's license number
  • Passport number
  • Postal address
  • Nationality

We never ask for or keep scans or photos of your documents. We only store what you type into our forms.

What we never collect

Rod never collects banking or payment data. Any money changes hands directly between you and the agency, outside the Platform.

We don't collect biometric data, sensitive data, or data about minors.

4. Why and how we use your data

What your data is used for

We use your data to:

  • Manage your account: sign-up, login, and upkeep.
  • Send your booking to the agency you chose.
  • Help you and the agency communicate.
  • Keep the Platform secure and catch fraud.
  • Meet our legal duties in Tunisia and, where relevant, Europe.

Our legal basis

We process your data for these legal reasons:

  • Contract performance: to create your account and send your bookings.
  • Your consent: for example, for ad cookies or Meta Pixel.
  • Legal obligation: to comply with the law.
  • Legitimate interest: for security and improving our service.

Cookies and advertising

We use Meta Pixel and the Meta Conversions API to measure our ads and target audiences better. These tools may send some data to Meta Platforms, Inc.

Our Cookie Policy covers these tools in detail. You can decline non-essential cookies anytime from the preference centre.

5. Who receives your data

Recipients

We only share your data when needed, with:

  • The agency you chose: they get the data needed for your booking and become responsible for it.
  • Our hosting providers: your data sits on secure servers at AWS and/or Hetzner, under contracts that protect it.
  • Authorities: if the law or a court requires it.

We never sell your data

Rod.tn never sells, rents, or transfers your personal data for commercial purposes.

We don't share data with ad networks or data brokers, except what's needed to run Meta Pixel (see Section 4).

Agency responsibility

Once your request reaches the agency, they alone are responsible for the data they process to carry out the rental contract. Rod takes no responsibility here.

6. Where your data is hosted

Our infrastructure

Your data lives on secure servers from AWS and/or Hetzner, both recognised providers that follow international security standards.

We've signed agreements with these hosts to keep your data protected.

International transfers

Hosting may move your data outside Tunisia. If it goes to a country outside the EU, we apply recognised safeguards, like the European Commission's standard contractual clauses.

If you're in the EU, your data may be processed in Europe (Hetzner) or outside the EU (AWS), always with matching contractual protections.

Data location

Where possible, we store Tunisian users' data in European data centres, or in countries with similar protections.

For more on our hosting providers, email contact@rod.tn.

7. How long we keep your data

Retention periods

We only keep your data as long as needed:

  • Active accounts: as long as you use the Platform. After deletion, we erase or anonymise your data quickly, unless the law says otherwise.
  • Inactive accounts: after a long period of no activity, we may deactivate your account and delete your data, notifying you first when we can.
  • Technical and security logs: kept briefly to keep the Platform safe and investigate issues, then deleted.

After retention ends

Once this period ends, we permanently delete your data or anonymise it so it can no longer identify you.

We may keep some data longer if the law, a court, or ongoing legal proceedings require it.

8. How we protect your data

Our security measures

We protect your data from loss, theft, or unauthorised access using encryption, access controls, authentication, and regular security checks.

Only staff who need it for their job can access your data, and they must keep it confidential.

No system is perfect

We follow industry best practices, but no electronic transmission or storage is fully secure. We can't guarantee absolute security.

If a data breach puts you at high risk, we'll notify you as the law requires.

Your responsibility

Keep your login details private. Contact us right away at contact@rod.tn if you notice any unauthorised use of your account.

9. Your rights

What you can ask for

Under applicable law, you can:

  • Access your data: find out if we process it and get a copy.
  • Correct it if it's wrong or incomplete.
  • Delete it, unless we have a legitimate reason to keep it.
  • Limit how we use it, in certain cases.
  • Object to processing based on our legitimate interest.
  • Withdraw consent anytime, without affecting past processing.

How to exercise your rights

Send a written request to: contact@rod.tn

We aim to respond within 30 days. We may ask you to verify your identity. For clearly unfounded or repeated requests, we may charge a fee or decline to act.

Children's privacy

The Platform is for users 18 and older only. We don't knowingly collect data from minors. If we find out we have, we delete it right away.

10. Changes to this policy

Our right to update

We may update this policy anytime, especially when the law or our practices change.

We'll announce major changes by email or a clear notice on the Platform before they take effect. Using the Platform after that means you accept the update.

Version history

The update date is shown at the top of this page. Check back regularly to stay informed.

If a change needs your fresh consent, we'll ask before acting.

Governing law

This policy follows Tunisian law, including Law No. 2004-63 of 27 July 2004 on data protection. For EU users, it's also designed to meet GDPR standards. Disputes go to the competent Tunisian courts.