Privacy

Information we handle

• Account name, email, language, password hash and verification details help us manage access. Authentication records can include a session token, IP address, device/browser information and timestamps.
• Rental requests include your contact details, equipment, dates, quantity, pickup or delivery choice, price estimate and status. Delivery requires an address; you can add rental notes. Suppliers receive the information needed to review and fulfill their requests.
• Business members and invitations include names, emails, roles and access history. Warehouse addresses are geocoded to locate equipment for nearby search; public proximity results show approximate distance. Warehouse pickup details, inventory descriptions and photos can be public. Share equipment information rather than identity documents, sensitive details or information about other people.
• We process city/postal-code searches, selected area/radius, site preferences, enquiries you send us and operational diagnostics. Enquiries reach our monitored business inbox through email. We do not collect payment-card details or run advertising or analytics trackers.

Why we use it

We use information to authenticate accounts, verify email, reset passwords, manage business access, answer enquiries, review and fulfill rental requests, send transactional updates, show nearby equipment and protect the service. Browse the catalog without an account. Optional location access is not required to search manually.

Service providers and sharing

Render hosts the application and database, with a Cloudflare edge path. AWS S3 hosts public equipment photos, SES delivers transactional messages and Places resolves city/postal searches and warehouse addresses saved by supplier owners. Delivery, forwarding and recipient mailbox providers also process email; our contact inbox forwards messages to the privacy officer. The relevant supplier business can access its rental requests; business owners manage their team. Payments, Google sign-in and embedded maps are not currently offered.

Optional location and remembered choices

Choosing current location requests one browser position to find a Canadian city. Coordinates are sent to PartyKit and AWS Places for resolution; the application saves the resulting city center rather than your device position. It does not continuously track you. You can enter a city/postal code instead. Confirming an area remembers its provider identity, label, center and radius on this browser. Shared search URLs and browser history can also contain the selected area and search terms.

Cookies, browser storage and where data is processed

Authentication uses a session cookie. Locale and business-selection cookies support the requested experience; theme and confirmed area choices use local storage. These are functional uses, not advertising tracking. Browser settings can clear cookies and storage and revoke location permission; clearing session cookies signs you out. Our AWS services are configured in Canada Central, outside Québec. Hosting, delivery and provider operations can process information outside Québec, including elsewhere in Canada and in the United States.

How we protect information

The public site uses HTTPS connections, password hashing, server-side business access checks and scoped application permissions for AWS services. Rental and team access follows business roles. Equipment photos and published pickup details can be public, so avoid including sensitive personal information in them.

Retention and deletion

Retention and deletion are handled manually. Account, rental, business and enquiry information does not currently have a general automatic deletion schedule. We assess deletion requests against the information needed to provide the service, applicable recordkeeping requirements and ongoing disputes. Expiring a session or invitation does not necessarily delete the stored record. Photos are versioned; hiding an item does not remove all image versions. Email, logs and backups can retain copies according to the relevant provider’s settings and lifecycle. Contact the privacy officer to discuss your information and any limits on deletion.

Access, correction and your choices

Contact the privacy officer below to request access, correction, a structured copy where applicable, or withdrawal of an optional use. We verify identity proportionately; you do not need to create an account to make a privacy request. The officer reviews requests manually, explains relevant retention obligations or restrictions and responds through a verified channel. The Commission d’accès à l’information explains how to make a privacy complaint or seek review of an access or correction dispute under the applicable procedure.

Keeping this notice current

We will keep the date and both language versions aligned with our actual practices. New uses or providers, including analytics or maps, need review before activation. Material changes and any additional choices will be communicated as appropriate.