Privacy Policy

1. Information we collect

Information you give us

• Account information: your name, email address, and password. The password is handled by Supabase Auth. We do not store it in our own tables, and we cannot read it. You may add a business name. Phone is optional. If you enter one when you sign up, we store it on your owner profile. Listing forms do not ask for a phone number. A renter may include an optional phone number on an inquiry about a listing, and we store that phone number with the inquiry.
• Listing information (owners): the equipment type, make, model, year, specifications, condition, location (city, ZIP or state), rates, availability, the description you write, insurance or damage-waiver choices, and photos you upload. Listing information is meant to be public. Anyone visiting the Site can see it.
• Messages and requests: what you send to an owner or renter through the Site (for example, a rental request or a reply), including dates, the equipment, your questions, and any contact details you choose to put in them. Be careful about what you put in a message.
• Subscription and billing information (owners): on your owner profile we store a Stripe customer id. For each listing subscription we store a Stripe subscription id, the subscription status (such as active, past due, or canceled), and the end of the current billing period. Card details are entered in Stripe Checkout and stored by Stripe, not by us. We do not store your full card number, the card brand, or the last four digits.
• Things you send us: support requests, feedback, and anything else you choose to share.

Information collected automatically

• Technical information: our hosting provider receives ordinary request data, such as IP address, browser type, the page requested, and the time of the request, in its logs. Our database provider keeps its own service logs. Our application writes error messages to the hosting logs. How long we keep technical logs is described in Section 5.
• Cookies: we only use the cookies needed for sign-in. We do not use advertising or tracking cookies. You can block or clear cookies in your browser settings, but parts of the Site (such as signing in) may not work.

Information from others

• Owners and renters may share information about you in messages or agreements. Stripe and our other providers may send us status or error information about your account or payments.
• Equipment rental agreements: the Site does not offer a sample rental agreement as a download or as a form, and it does not collect or store a filled-in rental agreement.

2. How we use information

We use personal information to:

• Create and run your account and sign you in.
• Show listings, let renters search and contact owners, and pass messages between users.
• Bill owner subscriptions through Stripe Checkout, and email the owner if a subscription payment fails.
• Send service email. Supabase Auth sends the email that confirms a new account. Resend sends the owner a listing inquiry and a notice when a subscription payment fails.
• Review listings and photos for accuracy and to enforce our Terms, and to prevent fraud, abuse and security problems.
• Keep the Site running, find and fix errors, and improve it.
• Comply with law, respond to legal requests, and protect our rights and the safety of others.
• Do anything else we describe when we collect the information, or that you ask us to do.

3. When we share information

We do not sell your personal information or share it for targeted advertising.

We share information only as follows:

• With other users, as part of how the Site works.
  • Owners' listings and profile details you choose to show (equipment details, photos, city, ZIP or state, rates, business or display name, member-since date, response time, ratings and insurance notes, if shown) are public.
  • When a renter sends a request or message to an owner,that owner receives the renter's message and whatever contact information the renter puts in it or the Site's form collects (for example name, email, phone number). The same is true in the other direction when an owner replies. We pass messages through the Site so that owners and renters can talk directly. We are not a party to their rental.
  • We do not show your email, phone number or street address publicly on listing or profile pages.
• With service providers who help us run the Site, under their own terms and privacy policies, and only as needed for their service:
  • Supabase: our database, sign-in (authentication), and file storage for listing photos in the equipment-photos bucket. It stores account, listing, inquiry, and photo data.
  • Stripe: payment processing for owner subscriptions. Stripe collects and stores card or bank details and has its own privacy policy.
  • Vercel: website hosting and delivery. It processes technical data such as IP address and request logs.
  • Resend: sends the listing-inquiry email to the owner and the payment-failed email.
• For legal reasons. If we believe in good faith that we must by law, court order or legal process, or to protect the rights, safety or property of you, us or others, including to investigate fraud or abuse.
• In a business change. If we sell, merge or reorganize our business, your information may go to the new owner, who must honor this policy for your existing information, or tell you of changes first.
• With your consent or at your direction.

Information that you make public on the Site, or that you share with another user, is outside our control once they have it. We cannot make them delete it or keep it private.

4. Payments and card information

Owner subscription payments are handled by Stripe Checkout. We do not receive or store your full card number, card brand, last four digits, or security code. We do not handle rent or deposits between owners and renters; those are arranged directly between the two of them, and any payment method they use is their choice.

5. How long we keep information

• Account information: while your account is open, and for up to 90 days after you close it.
• Listings and photos: while the listing is active. After removal or cancellation, we may keep copies in backups for up to 90 days.
• Messages: We keep messages while the accounts in the conversation are open, so both sides can refer back to them, and delete them within 90 days after both accounts are closed.
• Billing records: for 7 years. Stripe keeps its own records under its own policy.
• Technical logs: We keep technical logs for up to 90 days, unless we need them longer to investigate a security or abuse problem.
• We may keep information longer if the law requires it, if needed to resolve a dispute or enforce our Terms, or to prevent fraud.

6. Your choices and rights

• See and update your listings: on the Owner Dashboard, open the My Listings tab and choose Edit. The dashboard does not include a control to edit your account profile.
• Cancel a listing or its subscription:on the Owner Dashboard, My Listings tab, Cancel listing (or End trial on a free-trial listing) cancels that listing's Stripe subscription. On the Billing tab, Manage Billing in Stripe opens Stripe's billing portal, where you can cancel a subscription and update the card Stripe has on file.
• Ask us to access, correct, or delete your personal information, or close your account, by contacting us at db@dbarok.com. We may need to verify who you are first. We may keep some information where we must by law or need it for legitimate reasons (for example, billing records and fraud prevention).
• Cookies: use your browser settings to block or clear them (see Section 1).

State privacy laws. Depending on where you live, your state's privacy law may give you additional rights. We will respond to reasonable requests to access, correct or delete your information from anyone, in any state, at db@dbarok.com.

7. Children

The Site is for adults. You must be at least 18 to use it. The Site is not directed to children. We do not knowingly collect personal information from anyone under 18. If you think a child has given us information, contact us at db@dbarok.com and we will delete it.

8. Security

The Site is served over HTTPS. Passwords are handled by Supabase Auth and are not stored in our own tables in plain text. The database uses row-level access rules that limit who can change records, for example so an owner can update their own listings. No website or storage is perfectly secure, so we cannot guarantee it. Please use a strong, unique password and tell us if you think your account has been misused. If we learn of a security breach that affects your personal information, we will notify you as required by applicable law.

9. Other websites and where data is processed

The Site may link to other websites (for example, Stripe's pages or an owner's own site). Their privacy practices are their own. We are based in the United States. The Site is hosted on Vercel in the US East region (iad1). Our providers store data in the United States and may process it in other countries.

10. Changes to this policy

We may update this policy. We will post the new version with a new "Last updated" date, and, for material changes, try to tell you by email and on the Site at least 30 days in advance. If we plan to use your information in a new way that is very different from what we said when we collected it, we will tell you first.

11. Contact

Questions, requests or complaints about privacy:

Email: db@dbarok.com

Operator: Dbarok Technologies LLC