Handing a stranger your car, or driving off in one, only works if both sides have been checked and both sides know what happens when something goes wrong. This is what we verify, what we monitor, what we will not do, and how to report something.
Not “renters are verified and hosts are trusted”. A booking cannot proceed unless the renter, the host organisation and the vehicle all hold current verification. The check is symmetric because the risk is.
Every dispute is decided on timestamped, geotagged handover photographs and the checklist both parties signed. What neither party recorded did not happen — which protects whichever of them was telling the truth.
Exact vehicle addresses and phone numbers are revealed on confirmation. A driver’s identity is revealed at 24 hours before pick-up. Browsing a listing shows you nobody’s home address.
Automated fraud detection flags things for a person to look at. It cannot suspend an account on its own — only an administrator can, and the reason is written down.
Different sides of the marketplace carry different risks, so they are checked differently.
| Who | What we check | Why |
|---|---|---|
| Renters | Government ID with a liveness check · driving licence for self-drive · for foreign licences, an International Driving Permit or certified translation, plus arrival date and entry stamp | The person collecting the vehicle is the person who booked it, and is legally allowed to drive it here |
| Hosts | Government ID with liveness · OR/CR from the LTO · a notarised authorisation where the host is not the registered owner · CTPL insurance proof · payout details validated against the account name | The vehicle is legally registered, legally insured, and the person listing it is entitled to |
| Vehicles | OR/CR and CTPL currency, minimum six photographs, plate consistency across them | The car in the photographs is the car with the papers |
| Drivers | Professional licence, employment by the host organisation, identity documents | Every driver on the platform is a host's employee. We never supply drivers ourselves |
| Nominated drivers | Full licence verification, declared at least 12 hours before pick-up | Bring-your-own-driver is only as safe as the person you nominated, and the check takes time |
A licence expiring on day three of a five-day rental cannot be sold at all — the check is made against your drop-off date at checkout. It is the one design decision on this page that prevents a whole class of problem rather than handling it: the alternative is discovering it mid-trip, when the renter is already driving.
Foreign-licence eligibility — the 90-day window from arrival, the English-language requirement and IDP status — is being confirmed against current LTO issuance and is one of the rules most likely to change before launch.
Documents expire. A platform that checks once and never looks again is a platform full of expired papers.
It blocks new bookings and it blocks handover — it does not reach backwards. A suspension that auto-cancelled confirmed trips would turn one enforcement action into a mass refund event and could strand a renter mid-trip in Moalboal. A suspended host’s existing bookings run; their payouts go on hold and a person decides case by case.
Exact addresses and phone numbers appear on confirmation, not on the listing. A driver’s identity is revealed 24 hours before pick-up.
Hosts may fit a GPS tracker. Declaring it to the renter is mandatory and prominent — an undisclosed tracker means delisting and exposure under the Data Privacy Act.
Photographs are screened for stock imagery and for plate consistency across the set. A listing whose photos are of three different cars is not a listing.
Any account below 3.5★ across five or more bookings enters review — renters, hosts and drivers alike.
Duplicate devices, ID and selfie mismatches, repeated cancellations, chargeback history, and velocity limits on first bookings from foreign cards.
A documented escalation: host to platform, platform supplies booking evidence, ID copies and the last handover data, and supports the PNP report.
Message threads exist inside a booking and nowhere else. There is no way to message a host before you request, and that is deliberate: an open channel between strangers is where off-platform payment, harassment and scams happen, and every protection on this page depends on the transaction staying on the platform. It costs some convenience and it is worth it.
A rating system is a safety control, and it only works if it cannot be gamed or coerced.
Either party can flag a published review. It comes down for personal data, abuse, extortion — “remove this or I file a damage claim” — or a factual claim the dispute record contradicts. Removals are logged with a reason code.
That is the only remedy for a review you dispute. Publication is never held back because settlement is unfinished, because that would hand either side a way to silence the other by filing a claim.
A trust page that only lists strengths is not a trust page.
Trackers, handover photographs, ID documents and geotags are all personal data under RA 10173. What we collect, why, how long we keep it and how to get it are in the privacy notice — including the specific rule that a tracker the renter was not told about is a delisting offence.