Privacy Policy

1. Information We Collect

Information You Provide

We collect information you voluntarily provide when you:

• Create an account: name, email address, phone number, password, and ZIP code.
• Complete your profile: first and last name, bio, avatar, and optional phone verification.
• List a tool: tool details, photos, brand, model, condition, pricing, deposit amount, pickup neighborhood, and pickup address.
• Connect a payout account: identity information (legal name, date of birth, last four digits of SSN) and bank account details, collected and verified by Stripe on our behalf for federal banking compliance.
• Book a tool: rental dates, payment card details (handled by Stripe; we never see full card numbers), and any notes you write to the owner.
• Message another user: the contents of messages exchanged through the booking thread.
• Contact us: any information you include in your communications.

Information Collected Automatically

When you visit Presta, we automatically collect certain information, including:

• IP address and approximate location.
• Browser type and operating system.
• Pages visited and time spent on the site.
• Referring website or search terms.
• Device information.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in to your account.
• Remember your selected market and preferences.
• Protect against fraud and abusive behavior.
• Understand how the marketplace is used so we can improve it.

You can control cookies through your browser settings, though some features (like staying signed in) will stop working if cookies are disabled.

2. How We Use Your Information

We use the information we collect to:

• Operate and maintain the Presta marketplace.
• Match you to a launch market based on your ZIP code.
• Process booking requests, payments, deposits, refunds, and payouts.
• Verify identity for owners receiving payouts (via Stripe).
• Send transactional email about your bookings, listings, and account.
• Respond to your questions and support requests.
• Detect and prevent fraud, abuse, or unauthorized access.
• Comply with legal and tax obligations (including issuing 1099-K forms to owners who earn over the IRS threshold).
• Improve the site, the catalog, and the search experience.

3. How We Share Your Information

We may share your information in the following circumstances:

• Between renters and owners: when an owner approves a booking, the renter sees the owner's exact pickup address and phone number, and the owner sees the renter's full name and phone number, so the two can coordinate the handoff.
• Stripe: we use Stripe to process payments, capture deposits, route payouts to owners, verify owner identity, and issue tax forms. Stripe's privacy policy governs the information they handle on our behalf.
• Cloudinary: we use Cloudinary to host the photos owners upload with their listings.
• Resend: we use Resend to send transactional email (password resets, booking confirmations, listing notifications).
• Service providers: we work with other third-party companies (hosting, error tracking, analytics) that help us operate the platform. They are contractually obligated to protect your information and use it only to provide their service to us.
• Legal requirements: we may disclose information if required by law, court order, or to protect our rights, property, or the safety of users.
• Business transfers: if Presta is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction; you'll be notified before your information becomes subject to a different privacy policy.

We do not sell your personal information to third parties.

4. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption in transit using TLS for every page on the site.
• Password storage using industry-standard hashing (bcrypt).
• Payment card data handled exclusively by Stripe, who is PCI DSS Level 1 certified; we never see or store card numbers.
• Access controls limiting who on our team can view user data.
• Rate limiting and abuse-detection on sensitive endpoints.

No system can be 100% secure. While we work hard to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you.
• Maintain transaction records for accounting, tax, and dispute resolution.
• Comply with legal obligations.
• Enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or audit purposes (booking and payment records are typically retained for at least seven years for tax compliance).

6. Your Privacy Rights

You have the right to:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate information.
• Deletion: request that we delete your personal information (subject to retention requirements above).
• Portability: request your data in a portable format.
• Opt out: unsubscribe from marketing emails at any time (transactional emails about your bookings continue while you have an active account).

To exercise any of these rights, email hello@trypresta.com. We will respond within 30 days.

7. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, and share.
• The right to delete your personal information.
• The right to opt out of the sale or sharing of personal information (we do not sell personal information).
• The right to correct inaccurate personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a CCPA / CPRA request, email hello@trypresta.com.

8. Children's Privacy

Presta is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately and we will delete it.

9. Third-Party Links

The Presta site may contain links to third-party websites (for example, Stripe's onboarding flow). We are not responsible for the privacy practices of these external sites. Review their privacy policies before providing any personal information.

10. International Users

Presta operates from the United States. If you access the site from outside the U.S., be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll post the new policy on this page and update the "Last updated" date. For material changes, we'll also notify active accounts by email. Your continued use of Presta after changes are posted constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy or our data practices? Email hello@trypresta.com.