Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect: name, email, phone number, payment info (via Stripe), location, equipment listings, booking history, and messages between users.

To operate the marketplace, process payments, send booking notifications, verify identity, prevent fraud, and improve our service.

We share data with: Stripe (payments), Resend (emails), and Cloudinary (photos). We do not sell your data to third parties.

Equipment location is public to help renters find nearby items. Your exact address is only shared after a booking is confirmed.

Messages between users are stored on our servers for dispute resolution and safety. Do not share sensitive personal info in messages.

We use HTTPS, rate limiting, input sanitization, and CSRF protection. Passwords are hashed with bcrypt. JWT tokens are httpOnly cookies.

You can request account deletion, data export, or correction of your info by emailing support@toydroprents.com.

We retain data as long as your account is active. After deletion, residual data may remain in backups for up to 90 days.

We use essential cookies for authentication and session management. No tracking or advertising cookies.

We may update this policy. Significant changes will be emailed to you.