Privacy policy

TrovaCars is operated by Zentia Labs LLC and acts as a broker and distribution channel between travelers and car rental providers.

This policy covers the data we collect when you search, compare, and book vehicles through TrovaCars, as well as when you browse our website or contact our support team.

• Identification and contact data: name, surname, email, phone number.
• Driver data: national ID or identity document, driving license, age.
• Payment data: payment tokens, transaction references (we do not store full card numbers).
• Search and browsing data: destinations, dates, vehicle preferences, search history.
• Technical data: IP address, browser, device, cookies, access logs.

• Query real-time availability with car rental providers.
• Manage your booking and transmit the necessary data to the selected provider.
• Process payments as an intermediary between you and the provider.
• Send you confirmations, changes, or notifications regarding your booking.
• Fraud prevention and platform security.
• Improve the service and personalize the comparison experience.
• Handle support requests and complaints.

• Performance of pre-contractual and contractual measures for searching, comparing, and managing bookings.
• Compliance with legal obligations regarding tax, accounting, and fraud prevention.
• Legitimate interest for platform security, service improvement, and service communications.
• Consent for non-essential cookies and optional marketing communications.

• Car rental companies with whom you book, so they can manage vehicle pick-up and return.
• Payment processors to handle charges securely.
• Anti-fraud and identity verification providers.
• Technology infrastructure providers necessary to operate the platform.
• Professional advisors and public authorities when required by law.

TrovaCars does not sell your personal data. We only share the information necessary to complete your booking and operate the service.

Provision of the service involves processing personal data across the United States – Spain – Colombia triangle, as described in the "Processing locations" section. Additionally, certain subprocessors may operate from other countries outside the European Economic Area.

To legitimize these international transfers we apply the safeguards recognized by applicable law, in particular:

• Standard Contractual Clauses (SCCs) adopted by the European Commission under Decision (EU) 2021/914, Module 2 (Controller to Processor), for transfers from Spain or any other EEA country to the United States and Colombia.
• Model contractual clauses published by the Colombian Superintendence of Industry and Commerce (SIC) for international transfers originating in Colombia.
• United States legal framework applicable to Zentia Labs LLC as a company incorporated in the State of Wyoming, including the contractual obligations undertaken in the data processing agreement.
• Adequacy decisions, recognized certifications, or reasonable supplementary technical measures where applicable.

The data processing agreement (DPA) incorporated into the terms of service constitutes, by itself, the contractual safeguard mechanism for transfers between the customer and Zentia Labs, since it incorporates obligations, guarantees, and rights equivalent to those provided by the safeguards above. For additional transfers to subprocessors, Zentia Labs relies on the DPAs and transfer clauses published by those providers.

• Searches and comparisons without a booking: up to 12 months from the last interaction.
• Booking, billing, and driver documentation data: for the periods required by applicable tax and accounting regulations.
• Security and access logs: up to 12 months, unless an investigation requires longer retention.
• Support data: up to 3 years from case closure.

We apply reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, security event monitoring, and vendor reviews.

Where applicable, you may exercise your rights of access, rectification, erasure, objection, restriction, and portability regarding your personal data.

To exercise any of these rights, contact us at info@raxmobility.com.

TrovaCars is not intended for minors. To rent a vehicle you must meet the age requirements of the relevant provider.

You must provide accurate and truthful data, especially regarding the driver, identity documents, and driving license. Inaccurate data may prevent vehicle pick-up or result in additional charges from the provider.

We may update this policy to reflect legal, technical, or product changes. The current version will be published on this page together with its last update date.