EquipFlow

Privacy Policy

We treat equipment data and user data with the same seriousness.

This page explains how EquipFlow collects, uses, and protects information in the course of running shared equipment operations.

Last updated: April 8, 2026

Information We Collect

  • Account details such as name, email, and role within your workspace.
  • Booking and equipment activity including requests, approvals, pickups, returns, and maintenance records.
  • Transaction metadata for payments and deposits processed through Stripe.
  • Technical data such as device, browser, IP address, and logs used for security and reliability.

How We Use Information

  • Operate and improve booking, approval, payment, and return workflows.
  • Prevent booking conflicts, detect misuse, and maintain platform integrity.
  • Provide support, incident response, and communication related to your account.
  • Meet legal, accounting, and compliance obligations where required.

Payments and Third-Party Processing

  • Card and payment details are processed by Stripe. EquipFlow does not store full payment card numbers.
  • We retain only payment records required for reconciliation, reporting, and support.
  • Third-party services are used under contractual and security controls appropriate for operational needs.

Data Retention

  • Account and booking data are retained while your workspace remains active.
  • Certain records may be retained longer when necessary for audit, dispute resolution, or legal requirements.
  • When deletion is requested and permitted, data is removed or anonymized according to our retention process.

Your Rights and Choices

  • You may request access, correction, or deletion of personal information, subject to applicable law.
  • Workspace administrators may manage user accounts and operational records within their organization.
  • You can contact us anytime to ask privacy-related questions or submit a data request.

Security Practices

  • We apply technical and organizational safeguards to protect data from unauthorized access and misuse.
  • Access to operational data is restricted based on role and business need.
  • Security controls and monitoring are reviewed regularly to keep pace with platform growth and risk.