Version 1.0. Effective from 24 October 2026.
This notice explains which data BEEP processes when an artificial-intelligence assistant (the "Agent") searches, books or manages a car rental on your instruction through the BEEP tools (https://mcp.beep.rent). It supplements the BEEP privacy policy. The Polish version is the binding one.
1. Who is responsible
- The controller of the data processed by the BEEP tools is BEEP Rent Sp. z o.o., ul. 1 Maja 27/34, 58-500 Jelenia Góra, Poland, e-mail
biuro@beep.rent. - The provider of your AI assistant (for example Anthropic, OpenAI, Google) is a separate, independent controller of the data you share in your conversation. BEEP does not receive the content of your conversation with the assistant — only the data the Agent passes to the BEEP tools.
- The rental company you book with receives the data needed to perform the rental agreement and is its separate controller.
2. Which data we process
- Search and offers: pickup and return place and time, driver age and licence tenure, selected options. No personal data is required.
- Reservation: first name, last name, e-mail address, phone number, optionally invoice details and booking notes, consents to the terms. We do not collect driving licence or identity document numbers in the agent channel.
- Confirmation and management: one-time codes sent by SMS or e-mail (we keep only a hash), the reservation number.
- Technical data: the IP address and platform name the call comes from, the call identifier, the tool name, its result and duration. Call arguments are stored with personal data masked.
- Connecting your BEEP.rent account to an assistant (BEEP ID): when you let an assistant act on your own reservations, we process the e-mail address you sign in with (we send a one-time code to it and keep only its hash), your consent (the assistant's name, what it may do and when you allowed it) and the access tokens issued to the assistant (we keep only their hashes), with the IP address and browser of the consent. The assistant then receives the number, status, dates, pickup place, car and total of your reservations, and may cancel or extend one only after your explicit confirmation in the conversation.
3. Purposes and legal bases
- Preparing and performing the reservation and the rental agreement, handling cancellations and extensions — Article 6(1)(b) GDPR.
- Security of the tools, abuse prevention, call limits, settlements with partners and channel statistics — BEEP's legitimate interest, Article 6(1)(f) GDPR.
- Accounting and tax obligations — Article 6(1)(c) GDPR.
- Marketing — only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
4. Recipients
The rental company carrying out the rental; the payment operator Viva Wallet (when the reservation requires an advance); SMS and e-mail delivery providers; BEEP's hosting and infrastructure providers; a Publisher — only the fact that a reservation was attributed to them, without your contact details, when the Agent used that Publisher's API key; the provider of an assistant you connected your BEEP.rent account to — the data of your reservations listed in section 2, item 5.
5. How long we keep data
We keep data for as long as it is needed for the purposes described in section 3. How long that is depends on the kind of data:
- Reservation and rental agreement data, including its confirmation, cancellation and extension — while the agreement is prepared and performed, and afterwards for as long as tax and accounting law requires and as it may be needed to establish, pursue or defend legal claims.
- Tool call records and technical data — for as long as they are needed to keep the tools secure, prevent abuse, handle reports and complaints, settle with partners and keep channel statistics.
- Connecting your BEEP.rent account to an assistant (BEEP ID) — the assistant has access to your reservations until you disconnect BEEP.rent in the assistant; access the assistant leaves unused for a long time expires on its own. We keep the record of your consent for as long as it may be needed to show who granted it and when.
- Marketing — until you withdraw your consent; we keep the record of the consent being given and withdrawn so that we can show it.
6. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to processing based on legitimate interest, and the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). For data matters write to biuro@beep.rent; for the agent channel to agents@beep.rent.
7. Changes
Changes to this notice are announced on this page with the date of the new version.