Privacy Policy

1. Introduction

Equipt247 LLC (“Equipt,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and protect information when you access or use the Equipt platform located at equipt247.com and any associated mobile applications, APIs, or services (collectively, the “Platform”).

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use the Platform.

This Privacy Policy is incorporated into and forms part of our Terms of Service. Capitalized terms used but not defined herein have the meanings given to them in the Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Full name, email address, phone number, password (stored in hashed form), and account preferences when you register for an account
• Profile Information: Profile photo, header image, bio, location, and any other information you choose to add to your public profile
• Listing Information: Equipment descriptions, photos, pricing, location, category, specifications, and availability when you create equipment listings
• Transaction Information: Booking details, rental dates, rental amounts, messages between Users, reviews, and ratings
• Rental Agreement Data: Digital signatures, acknowledgments, and condition documentation photos (pre-rental, drop-off, and return photos)
• Payment Information: Payment method details are collected and processed by our third-party payment processor, Stripe, Inc. Equipt does not directly collect, store, or have access to your full credit card numbers, bank account numbers, or other sensitive financial data
• Communications: Messages sent through the Platform, emails to our support team, and any other communications you send to us or other Users through the Platform
• Verification Information: Identification documents, business licenses, insurance certificates, or other verification materials you may submit

2.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type and version, device identifiers, and mobile network information
• Usage Data: Pages viewed, links clicked, search queries, time spent on pages, referring URLs, and interaction patterns
• Log Data: IP address, access timestamps, error logs, and server request data
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain session state, remember preferences, and analyze Platform usage. See Section 8 for details
• Location Data: Approximate geographic location derived from your IP address. We may collect more precise location data if you grant permission through your device settings

2.3 Information from Third Parties

• Payment Processor: Transaction status, payment confirmation, and limited account information from Stripe
• Authentication Services: Account verification data from Supabase Auth (our authentication provider)
• Public Sources: Publicly available information that supplements your profile data

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Platform Operations

• To create, maintain, and secure your account
• To facilitate equipment rental transactions between Owners and Renters
• To process payments and issue payouts through our payment processor
• To enable communication between Users regarding bookings and transactions
• To display listings, profiles, and reviews to other Users
• To enforce rental agreements and facilitate the photo documentation process

3.2 Communication

• To send transactional notifications (booking confirmations, status updates, payment receipts)
• To send service-related announcements (maintenance, security alerts, policy changes)
• To respond to your inquiries, support requests, and feedback
• To send promotional communications (with your consent, where required by law)

3.3 Safety and Security

• To detect, prevent, and investigate fraud, unauthorized access, and other illegal activities
• To enforce our Terms of Service and other policies
• To verify User identities and account information
• To monitor for and address security vulnerabilities
• To comply with rate limiting and abuse prevention measures

3.4 Improvement and Analytics

• To analyze usage patterns and improve the Platform’s features, design, and performance
• To conduct research and development for new features
• To generate aggregated, de-identified statistics about Platform usage

3.5 Legal Compliance

• To comply with applicable laws, regulations, and legal processes
• To respond to lawful requests from government authorities
• To establish, exercise, or defend legal claims

4. How We Share Your Information

We do not sell your personal information to third parties. We share information only in the following circumstances:

4.1 With Other Users

• Your public profile information (name, profile photo, bio, location, member since date, verification status) is visible to other Users
• When you make a booking or receive a booking request, relevant information (name, contact information as needed) is shared with the other party to facilitate the rental
• Reviews and ratings you leave are publicly visible
• Your email address is not shared with other Users through your public profile

4.2 With Service Providers

We share information with third-party service providers that perform services on our behalf, including:

• Stripe, Inc.: Payment processing and fraud detection
• Supabase: Database hosting, authentication, and file storage
• Vercel: Web hosting and content delivery
• Email service providers: Transactional and promotional email delivery

These providers are contractually obligated to use your information only to provide services to us and in accordance with this Privacy Policy.

4.3 For Legal and Safety Reasons

We may disclose your information if we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, legal processes, or enforceable governmental requests
• Enforce our Terms of Service or other agreements
• Detect, prevent, or address fraud, security, or technical issues
• Protect the rights, property, or safety of Equipt, our Users, or the public
• Respond to an emergency involving danger of death or serious physical injury

4.4 Business Transfers

If Equipt is involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform of any change in ownership or uses of your information.

4.5 With Your Consent

We may share your information with third parties when you provide explicit consent to do so.

4.6 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for any purpose, including research, analytics, marketing, and business development.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL (HTTPS)
• Encryption of sensitive data at rest
• Hashed password storage (passwords are never stored in plain text)
• Row-level security (RLS) policies on database tables to prevent unauthorized data access
• Secure cookie attributes (SameSite=Strict, Secure flag) for authentication tokens
• Server-side and client-side rate limiting to prevent brute-force attacks
• Input validation and sanitization to prevent injection attacks
• Regular security reviews and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain and use your information as necessary to:

• Comply with our legal obligations (including tax and financial record-keeping requirements)
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse
• Maintain records for legitimate business purposes

When your account is deleted, we will delete or de-identify your personal information within a reasonable time, except where retention is required by law or for legitimate business purposes as described above. Certain information (such as transaction records) may be retained for up to seven (7) years for tax and legal compliance.

Backup copies of data may persist in our systems for a reasonable period after deletion but will not be used for active processing.

7. Your Rights and Choices

7.1 Account Information

You may access, update, or correct your account information at any time through the Platform’s Settings page. To delete your account, contact us at support@equipt247.com.

7.2 Communication Preferences

You may opt out of promotional emails by clicking the “unsubscribe” link in any promotional email. You cannot opt out of transactional or service-related communications that are essential to your use of the Platform.

7.3 Cookie Preferences

Most web browsers allow you to control cookies through browser settings. Note that disabling cookies may affect the functionality of the Platform, particularly authentication and session management.

7.4 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for collecting it, and the categories of third parties with whom we shared it
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (such as legal compliance and ongoing transactions)
• Right to Correct: You have the right to request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights

To exercise these rights, contact us at privacy@equipt247.com or support@equipt247.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

7.5 Other State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws may have additional rights, including the right to access, correct, delete, and opt out of certain data processing. Contact us at privacy@equipt247.com to exercise these rights.

7.6 Do Not Track

The Platform does not currently respond to “Do Not Track” (DNT) browser signals. We will update this policy if we adopt DNT response practices in the future.

8. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential/Functional Cookies: Required for the Platform to function properly. These include authentication session cookies (the “equipt-auth” cookie) and security tokens. These cannot be disabled without breaking core functionality.
• Local Storage: Used to store user preferences, rate limiting data, and cached information to improve performance. Data stored locally never leaves your device unless explicitly transmitted through Platform features.

We do not currently use third-party advertising cookies or cross-site tracking technologies. If this changes, we will update this Privacy Policy and provide appropriate notice and consent mechanisms.

9. Children’s Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to promptly delete that information. If you believe that a child under 18 has provided us with personal information, please contact us immediately at privacy@equipt247.com.

10. International Data Transfers

The Platform is hosted in the United States. If you access the Platform from outside the United States, you understand and consent to the transfer, processing, and storage of your information in the United States and other countries where our service providers operate. Data protection laws in these countries may differ from those in your jurisdiction. By using the Platform, you consent to such transfers.

11. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or applications that are not operated by Equipt. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit. This Privacy Policy applies solely to information collected through the Platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of material changes by:

• Posting the updated Privacy Policy on the Platform with a new “Last Updated” date
• Sending an email notification to the address associated with your account (for material changes)
• Displaying a prominent notice on the Platform (for material changes)

Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Equipt247 LLC
Privacy Inquiries: privacy@equipt247.com
General Support: support@equipt247.com
Legal: legal@equipt.com

We will respond to all privacy-related inquiries within 45 days of receipt, or as otherwise required by applicable law.

If you are a California resident, you may also contact the California Attorney General’s Office at oag.ca.gov or the Office of the Attorney General, 1300 I Street, Sacramento, CA 95814.