Privacy Policy

This policy explains what personal data Skootora collects, why, who it is shared with, and the choices you have. Skootora is operated by Joel Alfaro, C/ de Balmes, 129 Bis, L’Eixample, 08008 Barcelona, Spain — an individual (a sole trader, not a company) acting as the data controller. Questions: support@skootora.com.

The operator named above may change: a company is being set up to run Skootora, and it will then be the data controller. The version of this policy published on this page is always the one in force, and the date above is when it last changed.

Who we are, and what Skootora is

Skootora is a marketplace that connects travellers with independent scooter rental shops in Bali. We are not the rental provider: the rental itself is a contract between you and the shop. Some shops deliver the bike to your accommodation; with others you collect it at the shop. We handle the search, the booking request, the online payment and the messages between the two of you.

Data we collect

If you book as a customer:

• Your name, email address and phone number.
• Your rental dates, and the bike, price and shop you chose.
• For a delivery booking, where the bike goes: your accommodation name, address and room. For a pickup booking we do not collect this — you collect the bike at the shop.
• Optional details you choose to give: an arrival flight number and a message to the shop.
• Your language and the currency you viewed prices in.

If you register as a shop:

• Your account email, your shop and contact details, your address, and the bikes and — if you deliver — the delivery zones you list.
• Your bank account details, used only to pay you what you are owed.
• Photos of your bikes that you upload.

On our mobile apps, and automatically:

• Basic technical data your device sends (IP address, device and browser type), used to run the service and keep it secure.
• If you use one of our mobile apps and grant permission: the camera, only to add bike photos, and a push notification token so we can send you booking updates. You can refuse or revoke these in your device settings; a token is removed when you turn notifications off.

Payment card details are never seen or stored by us. They are entered directly on our payment processor’s secure page. The security deposit is handled in cash by the shop — the platform never touches it.

Why we use it

• To provide the service: take your request to the shop, take payment, issue the voucher, and let you and the shop reach each other.
• To send you transactional messages about your booking (confirmation, reminders, changes).
• To prevent fraud and abuse and to keep the service secure.
• To meet our legal, accounting and tax obligations.

We do not use your data for third-party advertising, and we do not track you across other apps or websites.

Who we share it with

We share the minimum needed, with service providers who process data on our behalf:

• The rental shop you book with, so it can hand you the bike: your name, contact and dates, and — for a delivery booking — your accommodation.
• Stripe — payment processing.
• Supabase — database, authentication and photo storage (hosted in Singapore, AWS ap-southeast-1).
• Vercel — application hosting and content delivery.
• Wise — sending payouts to shops.
• Resend — sending transactional email.
• Apple and Google — delivering push notifications to your device, if you turned them on.
• Authorities, where we are legally required to.

We never sell your personal data.

International transfers

Some of these providers process data outside your country, including outside the European Economic Area — our database and photo storage are hosted in Singapore (AWS ap-southeast-1). Where data leaves the EEA we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.

How long we keep it

We keep booking and payment records for as long as needed to provide the service and to meet legal and accounting requirements (up to 7 years), then delete or anonymise them. Bike photos remain while the listing is active.

Your rights

Subject to applicable law, you have the right to access, rectify, erase, port and object to the processing of your personal data. Exercise any of them by writing to support@skootora.com. Shops can also delete their account from within the shop app (Settings → Delete account); customers, who book without an account, can ask us to delete their data at support@skootora.com. You may also complain to your local data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

Children

Skootora is not directed to anyone under 18, and renting a vehicle requires a valid licence. We do not knowingly collect data from children.

Changes

We will update this policy as the service changes and post the new date at the top. Material changes will be notified in the app.

Contact

Joel Alfaro, C/ de Balmes, 129 Bis, L’Eixample, 08008 Barcelona, Spain. support@skootora.com.