Privacy Policy

1. Information We Collect

Information You Provide

• Account Information: When you register, we collect your name, email address, and organization details.
• Contact Information: Names, email addresses, phone numbers, and mailing addresses of your team members and customers that you add to the platform.
• Business Data: Equipment inventory records, rental and demo requests, contracts, invoices, and shipping information that you create within the Service.
• Communications: Messages you send through the Service, including comments, support requests, and demo request form submissions.

Information Collected Automatically

• Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and actions taken.
• Device and Connection Information: IP address, browser type, operating system, and device identifiers.
• Cookies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

2. What We Do Not Collect

Payment Information: We do not directly collect or store credit card numbers or banking information. All payment processing is handled by our third-party payment processor, Stripe, which has its own privacy policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process and fulfill equipment rental and demo requests.
• Send transactional emails (order confirmations, shipping notifications, password resets, etc.).
• Provide customer support and respond to inquiries.
• Monitor and improve the performance and reliability of the Service.
• Detect, prevent, and address security issues or fraud.
• Comply with legal obligations.

We do not use your information for targeted advertising. We do not sell your personal information to third parties.

4. How We Share Your Information

We may share your information only in the following circumstances:

• Service Providers: We share information with trusted third-party providers who help us operate the Service, including cloud hosting (DigitalOcean), email delivery (SendGrid), and payment processing (Stripe). These providers are contractually obligated to protect your information.
• Within Your Organization: Information you add to the Service is accessible to other authorized members of your organization, as determined by your organization's administrator.
• Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request.

We do not share your data across organizations. Each organization's data is isolated within the multi-tenant platform.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS), secure authentication, role-based access controls, and regular security reviews. While we take reasonable precautions, no method of transmission or storage is 100% secure.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we retain your data for 30 days to allow for reactivation or data export. After that period, your data is permanently deleted from our systems. You may request earlier deletion by contacting us.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to our legal obligations.
• Data Export: Request an export of your data in a standard format.

To exercise any of these rights, contact us at [email protected].

8. Canadian Privacy Law (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances. You may withdraw your consent to the collection or use of your personal information at any time, subject to legal or contractual restrictions, by contacting us.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].