Privacy policy: Equipment & Party Rentals

Last updated: 14 November 2026

This policy explains what data the Wix app “Equipment & Party Rentals” (the app), published by Kayabyte, the trading name of Caner Kaya, Stasjonsveien 64, 0771 Oslo, Norway (we, us), processes when it is installed on a Wix site. It adds to the privacy policy for Kayabyte apps for Wix, which also applies. Made by Kayabyte.

What the app does

The app lets a site owner rent out items (such as tents, chairs, bounce houses, cameras or bikes) through a booking widget on their site. Customers choose dates and times, and pay through the site’s Wix checkout.

Roles

The site owner is the controller for their customers’ data. Kayabyte acts as a processor that handles the data only to run the bookings the site owner offers. Wix.com Ltd. hosts the site, its checkout and its orders. Cloudflare, Inc. hosts the app’s booking service and its database (Cloudflare Workers and D1), and Resend sends the app’s emails (see Emails below). Cloudflare and Resend are sub-processors.

Data the app stores

• Items and settings the site owner enters: item names, descriptions, photo links, stock counts, prices, rules, extras, opening hours, closed dates, pickup locations, delivery fees, zones and windows, terms text and email text.
• Bookings: the rental dates and times, the items and quantities, pickup or delivery, the customer’s name, email address and phone number, the delivery address, a message to the owner and any extra fields the owner turned on (such as a licence number or event venue), the price, the part payment, balance and security deposit, the booking status and the Wix order number.
• Block-outs: the dates and items the owner blocked, with the owner’s label.
• An activity log of recent changes in the dashboard (time and what changed).
• Site details read from Wix: the site’s name, currency, time zone, business email address and the site’s plan for the app. We use the business email to give support and to send service messages about the app. It is kept while the app is installed and deleted 30 days after the app is removed. It is never shown to site visitors.
• Visitor keys: one-way keyed hashes of the visitor’s network address and of the anonymous visitor ID Wix gives the browser. They are used only to let one visitor hold a limited number of unpaid bookings at a time and to limit how many bookings one network address can start on a site per hour. They can’t be turned back into the address or ID.

Emails

The app sends emails through Resend: a confirmation to the customer’s email address with the customer’s name, the items, the times, the pickup or delivery details and the amounts. With the site owner’s settings on, it also sends reminders before pickup and return. The site owner’s business email gets short service messages, such as a new booking, a cancellation, an overlap between bookings, or that the Free plan’s monthly booking limit was reached. The app keeps no copy of these emails; it records only that each one was sent, so it is not sent twice. Resend handles the emails under its own privacy policy.

Data the app does not handle

Payments go through the site’s Wix checkout. We never receive card or bank details. The booking widget shows visitors only which items are free, never who booked. The calendar feeds the app can create list the item, quantity and time of each booking and no customer details; the link of each feed contains a secret token.

Logs

The booking service writes technical log lines (the app instance ID, the request path, the outcome and, for errors, a short message). Logs contain no customer names or contact details and are kept by Cloudflare for a short time. Install, removal and plan events that Wix sends the app, with the app instance ID, are also copied to Kayabyte’s private usage statistics, so we can see how many sites use the app.

Retention and deletion

• Bookings that were never paid are deleted after they lapse. Technical records used to avoid handling the same Wix notification or booking attempt twice are deleted within days.
• The activity log is kept for 90 days.
• Customer names, emails, phone numbers, addresses, notes and extra fields on past bookings are erased about 400 days after the rental ended. The dates, items and amounts stay, so the site owner keeps a record.
• When the app is removed from a site, the site is disabled and its booking widget stops taking bookings. The data is kept for 30 days, so reinstalling the app within that time restores everything. After 30 days, everything stored for the site (items, bookings, settings, block-outs) is deleted. We also keep a small install record for our own install counts: the site’s ID, when the app was installed or removed, and plan changes, with times. It holds no names, emails or booking data; to have it removed, write to support@kayabyte.dev.
• Orders and contacts that Wix holds for the site belong to the site and are not touched.
• Site owners can ask for earlier deletion, or deletion of a single customer’s data, at support@kayabyte.dev.

We do not sell data

We do not sell or rent data, and we do not use it for advertising or for any purpose other than running the app. Data is shared only with Wix, Cloudflare and Resend, as described above.

Cookies and tracking

The app sets no cookies on the site and uses no analytics, advertising or tracking services. The booking form keeps the visitor’s selection (dates, quantities, extras) in the browser’s session storage until they book; it is not sent to us before then.

Your rights

Customers should contact the site owner about their booking data. For questions about this policy, or to exercise rights under the GDPR, contact support@kayabyte.dev.

Changes

We will update this page if the app’s data handling changes. The date at the top shows the latest version.