Privacy Policy
Last updated: March 28, 2026
1. Introduction
This Privacy Policy explains how 12Borrow ("we," "our," or "us") collects, uses, and shares information about you when you use our peer-to-peer rental marketplace ("the Platform"). By using 12Borrow, you consent to the data practices described in this policy.
2. Information we collect
We collect information you provide directly: (a) Account information: name, email address, profile photo, and password when you register; (b) Identity verification: government ID details if required for verification; (c) Listing information: item descriptions, photos, location (city/ZIP), and pricing; (d) Booking information: rental dates, messages exchanged with other users, and transaction records; (e) Payment information: billing address and last-4 digits of card (full payment details are handled exclusively by Stripe and are never stored on our servers); (f) Communications: messages sent through the Platform and support inquiries; (g) Photos submitted for damage or return documentation.
3. Information collected automatically
When you use the Platform, we automatically collect: (a) Log data: IP address, browser type, operating system, pages visited, and timestamps; (b) Device information: device type, operating system version, and unique device identifiers; (c) Usage data: features used, search queries, and interactions with listings; (d) Cookies and similar technologies: session tokens, preference cookies, and analytics identifiers (see Section 7).
4. How we use your information
We use your information to: (a) operate the marketplace and facilitate rentals; (b) process payments and manage security deposits; (c) verify identities and prevent fraud; (d) send booking confirmations, receipts, and status notifications; (e) mediate disputes between users; (f) respond to customer support requests; (g) enforce our Terms of Service; (h) improve and develop the Platform; (i) comply with legal obligations. We do not sell your personal data to third parties for advertising purposes.
5. Information shared with other users
To facilitate a rental, we share limited profile information between parties to a booking: your first name, profile photo, and general location (city). Your full address, phone number, and payment details are never automatically shared. If you choose to message another user through the Platform, that user can see your messages. Reviews you leave are publicly visible.
6. Information shared with third parties
We share your information with: (a) Stripe, Inc. for payment processing — Stripe's privacy policy governs how your payment data is handled; (b) Supabase, our database and authentication provider; (c) Vercel, our hosting provider; (d) Law enforcement or government authorities when required by law or to protect the rights and safety of users; (e) Successors in the event of a merger, acquisition, or sale of assets, with appropriate notice to you. We require all third-party providers to maintain appropriate security measures and to use your data only as directed by us.
7. Cookies and tracking
We use essential cookies to maintain your login session and remember your preferences. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect the functionality of the Platform. We may use analytics tools to understand aggregate usage patterns; any such tools are configured to minimize the collection of personally identifiable information.
8. Data retention
We retain your account data for as long as your account is active or as needed to provide services. Booking and transaction records are retained for a minimum of 7 years for legal and accounting purposes. Damage and dispute photos are retained for 90 days after dispute resolution. You may request deletion of your account at any time; we will delete your personal data except where retention is required by law or necessary to complete pending transactions.
9. Security
We implement industry-standard security measures including HTTPS encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password and to report any suspected unauthorized access to your account immediately.
10. Your rights
Depending on your jurisdiction, you may have the right to: (a) access the personal data we hold about you; (b) correct inaccurate personal data; (c) request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements; (d) object to certain processing of your data; (e) receive your data in a portable format; (f) withdraw consent where processing is based on consent. To exercise any of these rights, contact us at privacy@12borrow.com. We will respond within 30 days.
11. Children's privacy
The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will promptly delete it.
12. California residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and to whom it is sold (we do not sell personal information), the right to delete your personal information, and the right to non-discrimination for exercising your rights. To submit a CCPA request, contact us at privacy@12borrow.com.
13. International transfers
Your information may be processed and stored in the United States or other countries. By using the Platform, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
14. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
15. Contact us
If you have questions or concerns about this Privacy Policy or our data practices, contact our Privacy team at privacy@12borrow.com.