Privacy Policy

Envalt LLC (d/b/a ToolShed) ("ToolShed," "we," "us," or "our") operates a peer-to-peer tool rental marketplace through our mobile application and website at toolshed.cc (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.

By using ToolShed, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.

Account Information: When you create an account, we collect your name, email address, phone number (optional), and profile photo (optional). Authentication is handled through our identity provider, Clerk.

Location Data: We collect your approximate location to show tools available near you. Location data is collected only when you use the app and grant location permission. We use MapTiler for map rendering and PostGIS for geographic queries.

Payment Information: Payment processing is handled by Stripe. We do not store your credit card numbers or bank account details on our servers. We store Stripe account identifiers to link your ToolShed account with your payment methods.

Listing Information: When you list a tool, we collect the title, description, photos, pricing, category, and pickup location you provide.

Communication Data: We store messages exchanged between users through our in-app messaging system to facilitate tool rental transactions.

Device Information: We collect device type, operating system version, and push notification tokens to deliver notifications about your bookings and messages.

Usage Data: We collect anonymized usage analytics to improve the Platform, including pages viewed, features used, and error reports via Sentry.

We use your information to:

• Provide, maintain, and improve the Platform
• Match renters with tool owners based on location and availability
• Process payments and payouts through Stripe
• Facilitate communication between renters and lenders
• Send booking confirmations, reminders, and status updates
• Verify user identity and prevent fraud
• Respond to support requests
• Comply with legal obligations

We do not sell your personal information. We share information only in the following circumstances:

With Other Users: When you book a tool or list a tool, relevant profile information (display name, profile photo, ratings) is shared with the other party. Your exact address is never shared until a booking is confirmed.

Service Providers: We use the following third-party services that process data on our behalf:

• Stripe - Payment processing and payouts
• Clerk - Authentication and identity management
• Cloudflare - Content delivery, image storage (R2), and web hosting
• MapTiler - Map tile rendering
• Sentry - Error tracking and performance monitoring
• Expo - Push notification delivery

Legal Requirements: We may disclose information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained until you delete your account
• Booking and payment records are retained for 7 years for tax and legal compliance
• Messages are retained while your account is active
• Push notification tokens are deleted when you sign out or revoke permission

When you delete your account, we permanently remove your personal data. Some anonymized data may be retained for aggregate analytics (e.g., rating averages for tools).

You have the right to:

• Access your personal data via the data export feature in the app (Profile > Account > Export My Data)
• Delete your account and all associated data (Profile > Account > Delete Account)
• Update your profile information at any time through the app
• Opt out of push notifications through your device settings
• Withdraw consent for location access through your device settings

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@toolshed.cc or use the in-app account management features.

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

Our legal bases for processing your data are: contract performance (providing the Platform), legitimate interest (improving our services), and consent (location data, notifications).

Our website uses essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. Our mobile app does not use cookies.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of sensitive data at rest
• Rate limiting and abuse prevention
• Regular security audits of our API and infrastructure

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@toolshed.cc.

ToolShed is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@toolshed.cc
• Website: toolshed.cc