Privacy Policy

Last updated: March 30, 2026

1. Information We Collect

Account information: When you create an account, we collect your name, email address, and authentication credentials (managed by Firebase Authentication).

Profile information: You may optionally provide your location, bio, and profile photo.

Listing information: When you list an item, we collect the title, description, photos, pricing, location, and availability you provide.

Transaction information: Booking dates, rental amounts, and payment status. Payment details (card numbers) are processed and stored by Stripe — we never see or store your full card number.

Communications: Messages exchanged through our platform between renters and lenders.

Usage data: We collect basic server logs including IP addresses, browser type, and pages visited for security and performance monitoring.

2. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Process transactions and send related notifications
• Facilitate communication between renters and lenders
• Send service-related emails (booking confirmations, expiry notices)
• Prevent fraud, enforce our Terms, and ensure platform safety
• Improve the Service

3. Information Sharing

We do not sell your personal information. We share information only in these circumstances:

• Between transaction parties: Your name and messages are shared with the other party in a rental transaction
• Service providers: We use Stripe for payments, Firebase for authentication and data storage, and Resend for email delivery. These providers have their own privacy policies
• Legal requirements: We may disclose information if required by law or to protect the rights, safety, or property of LendIt or others

4. Data Storage and Security

Your data is stored using Google Cloud Firestore and Firebase services. We use HTTPS encryption for all data in transit, Firebase Authentication for secure login, and server-side validation for all sensitive operations. While we implement reasonable security measures, no system is completely secure.

5. Your Rights

You may:

• Access and update your profile information at any time
• Delete your listings from your profile page
• Request deletion of your account by contacting us
• Opt out of non-essential emails

California residents may have additional rights under the CCPA. Contact us to exercise these rights.

6. Cookies and Local Storage

We use browser local storage to cache your authentication state and profile data for a faster experience. We do not use third-party tracking cookies. Firebase and Stripe may set their own cookies as necessary for their services.

7. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children under 18.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

9. Contact Us

For privacy-related questions or requests, contact us at [email protected].