Privacy Policy | ToolLoop

These policies are provided for your platform. Have a qualified attorney review them before relying on them for compliance purposes.

Your privacy matters to us. This policy explains what data we collect, why we collect it, how we use it, and your rights regarding your personal information.

Beta notice: During our beta period, some processes (including identity verification) are handled manually by our team rather than fully automated third-party services. This policy describes what we do today; we plan to migrate identity verification to Stripe Identity so sensitive ID documents are processed and retained by Stripe rather than stored on ToolLoop systems.

1. Information We Collect

Account Information: Name, email address, phone number, password (hashed), and profile photo.

Identity Verification Data (beta): When you complete ID verification, you upload photos of the front and back of a government-issued photo ID (for example, a driver's license or passport). During beta, these images are stored in a private cloud bucket, associated with your account, and reviewed manually by authorized ToolLoop administrators. After approval, we may delete the images while retaining a limited legal identity record (such as legal name, date of birth, address, document type, and the last four digits of the document number) to help prevent fraud, recover stolen tools, and respond to valid law enforcement requests. We do not sell ID images or use them for marketing. We plan to replace this manual process with Stripe Identity verification, which would process documents through Stripe and reduce the amount of sensitive ID data stored on our systems.

Financial Information: Payment method details are processed and stored securely by Stripe. We store only tokenized references to your payment method.

Usage Data: IP address, device type, browser, pages visited, search queries, and rental history.

Communications: Messages sent through our in-app messaging system and customer support correspondence.

Location Data: General location used to show nearby listings. Precise GPS is only collected if you explicitly grant permission.

2. How We Use Your Information

To create and manage your account
To verify your identity and prevent fraud
To process payments and payouts
To facilitate transactions between users
To send transactional notifications (booking confirmations, receipts, reminders)
To improve the Platform through analytics
To send marketing communications (you may opt out at any time)
To comply with legal obligations

3. How We Share Your Information

We do not sell your personal data. We share data only in the following circumstances:

With other users: Your display name, profile photo, and general location are visible to other users. Contact information is only shared when necessary to complete a transaction.
With authorized staff: During beta, identity document images may be viewed by ToolLoop administrators for verification and trust-and-safety review only.
With service providers: Payment processors (including Stripe), email delivery providers, cloud hosting and storage, and analytics tools — bound by data processing agreements where applicable.
For legal compliance: When required by law, court order, or to protect user safety.
Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you.

4. Email Communications

By creating an account, you consent to receiving transactional emails from ToolLoop — including account verification, booking confirmations, payment receipts, rental updates, and review requests. You can control non-essential email notifications in your account settings. Transactional emails related to active rentals may still be sent while your account is active.

5. Data Retention

We retain your account data for as long as your account is active, plus 3 years after closure for fraud prevention and legal compliance purposes. Transaction records are retained for 7 years for tax and legal requirements. Identity document images submitted during beta are retained while review is pending and may be deleted after approval. A limited legal identity record derived from your ID may be retained while your account is active and for fraud-prevention and legal compliance purposes after verification; we delete or anonymize data when no longer needed for those purposes or upon a valid deletion request where law allows. You may request deletion of personal data not subject to these requirements.

6. Cookies & Tracking

We use essential cookies to operate the Platform and optional analytics cookies to understand usage. You may control non-essential cookies through your browser settings or our Cookie Policy.

7. Your Rights

Depending on your location, you may have the right to:

Access and receive a copy of your personal data
Correct inaccurate data
Request deletion ("right to be forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise these rights, email us at privacy@renttoolloop.com. We will respond within 30 days.

8. Data Security

We use industry-standard security measures including TLS encryption, hashed passwords, and access controls. No method of transmission over the internet is 100% secure. In the event of a data breach affecting your information, we will notify you as required by applicable law.

9. Children's Privacy

The Platform is not directed at children under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately.

10. California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact privacy@renttoolloop.com.

11. Contact

Privacy questions or requests: privacy@renttoolloop.com
ToolLoop