ToolBNBToolBNB

Privacy Policy

Effective date: October 10, 2026 · Version 1.0

Toolbnb LLC ("ToolBNB," "we," "us" or "our") rents tools to customers in the United States through toolbnb.net. This Privacy Policy explains what personal information we collect when you visit our site, create an account, rent or request a tool, verify your identity, or contact us. It also explains how we use and share that information, how long we keep it, and the choices you have. It covers the emails, texts and other messages we exchange with you. It doesn't cover other companies' websites or services, even when we link to them.

The short version

  • We collect what we need to rent you tools: your name and email address, your shipping address and phone number, your orders and tool requests, and the messages you send us.
  • You enter your card into a secure form run by Stripe, our payment processor. We never see or store your full card number.
  • Before your first catalog order, Stripe checks a photo of your ID against a selfie. Stripe keeps the images and the face-matching data. Our team can view the images in our Stripe account, and does so only if an order needs a manual review, you ask us to help with your verification, or a tool isn't returned, comes back damaged or is missing from the return box, or there's a payment dispute. We don't copy them, and we never receive the face measurements. We keep the result and the name and address on your ID. We ask for your consent before the check starts.
  • We use your ID check to confirm that the person ordering is you, to decide whether an order needs review before it ships, to prevent fraud and misuse of our tools (including a tool that isn't returned, is returned damaged or is missing from the return box), and, if there's a dispute, to show that you placed the order and accepted your agreement. In a payment dispute we may tell your card issuer that you passed our ID check and when. We don't use it for marketing or routine billing. We share your ID images and details only with Stripe and the companies that host our systems, or when the law requires it, for example under a subpoena or court order.
  • We share information with the companies that help us run ToolBNB (payments, ID checks, sign-in, shipping, email and hosting) and with sellers that ship a tool straight to you. We also share it in the other limited cases in Section 5.
  • We don't sell your personal information, we don't use it for targeted advertising, and we don't report to credit bureaus.
  • To see, correct or delete your information, email info@toolbnb.net.

1. Who we are

Toolbnb LLC is a Florida limited liability company, and ToolBNB is our brand name. We decide how the personal information in this policy is used, which makes us its "controller" under privacy laws.

Toolbnb LLC
429 Lenox Ave
Miami Beach, FL 33139, USA
info@toolbnb.net

2. Information we collect

Information you give us:

  • Account details. Your name and email address. Auth0, our login provider, handles sign-in, so we never see your password. If you sign in with another account, such as Google, we receive your name and email address from that account.
  • Order details. Your shipping name, address and phone number; the tools you rent; your rental dates, amounts and return information; and a record of your acceptance of our rental terms (the version, the date and time, and the device and network information described below).
  • Tool requests. The tool's name, the link to the product page you give us, the price you enter, and what you plan to use the tool for. We also save a screenshot of the product page you linked.
  • Payment details. You type your card details into a secure form provided by Stripe. Stripe receives your full card number and security code; we don't. From Stripe we receive your card's brand, last four digits and expiration date; your billing address; whether the card is credit, debit or prepaid; your bank's address-verification result; and the amounts we hold, charge and refund.
  • Identity verification. For catalog checkout, the information described in Section 4.
  • Messages. What you send us through the chat on our site, by email, or by phone or text (including voicemails), and anything you include in those messages. If you message us on a social-media platform, that platform's own privacy policy also applies.

Records we create about your orders: the results of our automated order checks and of any review by our team; notes and photos on the condition of returned tools and any repair bills; amounts owed, payment results and card-decline reasons; and whether you've read our chat replies.

Information collected automatically:

  • Server logs. Our servers, and those of our service providers, record technical information such as your IP address, browser and device type, the pages you request, and the date and time. Our app also records what it does with your order. When something goes wrong, these records can include your email address, order number, or shipping and tracking details. We use logs to run the site, keep it secure and fix problems. When you accept a rental agreement, we keep your IP address and browser information with that acceptance as proof of it.
  • Fraud-prevention signals. On our checkout and tool-request pages, Stripe's code collects information about your device and how you use the page (for example, how quickly a form is filled in) so it can detect fraud and automated bots. It may also load hCaptcha, a bot-detection service. Once loaded, Stripe's code may keep running while you move to other pages in the same browser tab.
  • Site analytics.
    We don't currently use a site-analytics service. If we add one, we'll update this policy first.
  • Browser storage. Your browser's local storage keeps your cart, so it's still there when you come back. While you fill in a tool request, what you enter, including your name, email address, shipping address and phone number, is kept in your browser's session storage until you submit the request or close the tab.

Information from other companies:

  • Stripe: payment, hold and refund results, the card details listed above, fraud-risk assessments, and identity-verification results.
  • EasyPost and shipping carriers: address checks and tracking updates. These include when your package is delivered and when the carrier first scans your return, and those times determine your rental days.
  • Sellers we buy from: tracking details for tools they ship straight to you.

3. How we use your information

We use your information to:

  • Provide our services. We create and run your account, process orders and tool requests, check and format shipping addresses, ship tools, track deliveries and returns, and answer your messages.
  • Handle payments. We place holds on your card; work out rental fees, sales tax and shipping; and charge or refund your card as your rental agreement allows. That includes charges after a return and charges for tools that aren't returned. We save your card with Stripe for these charges, and so you can choose it again at a future checkout.
  • Verify identity and prevent fraud. We automatically compare the address on your ID with your card's billing address and your shipping address, and we check your bank's address-verification result. If a check doesn't pass, or the checks can't run, the order is held. A member of our team then reviews it, including the name on your ID, before it ships or is cancelled. Stripe's fraud tools may also decline a payment.
  • Keep in touch about your rental. We send order confirmations, receipts, shipping, return and payment notices, and replies to your messages. We may call or text the phone number you give us about a delivery, a return or an amount owed. We don't send marketing emails. If we start, each one will include our postal address and a working unsubscribe link, and we'll honor opt-outs within 10 business days.
  • Recover tools and amounts owed. As your rental agreement allows, we may contact you and use your account, order and shipping information to recover a tool that isn't returned or to collect an amount that isn't paid. We use your ID-check information here only for a tool that isn't returned, is returned damaged or is missing from the return box, and, if there's a dispute, to show that you placed the order and accepted your agreement. We don't use it to collect any other unpaid amount.
  • Keep records and meet our obligations. We keep tax and accounting records, handle disputes and chargebacks, enforce our agreements, and respond to lawful requests.
  • Improve the site. We look at how the site is used, in aggregate, and fix problems.

Why we're allowed to do this: to carry out our agreement with you; to meet legal obligations; for our legitimate interests in preventing fraud, keeping the site secure and recovering our property; and, where the law requires it, because you consent (for example, to the ID check in Section 4).

We don't use your information to decide whether you're eligible for credit, insurance, housing or employment.

4. Identity verification and biometric data (Biometric Data Notice)

Why we verify. Our tools are valuable, and we ship them to people we haven't met. Before your first catalog order, we confirm that you are the person placing it, to prevent fraud and theft. Tool requests don't use this check.

How it works. Stripe Identity, a service of Stripe, Inc., runs the check for us. You take a photo of your government-issued photo ID (driver's license, passport or ID card) and a live selfie. Stripe reads the information on your ID, such as your name, address, date of birth, ID number, expiration date and issuing country, and also collects information about the device you use for the check, which it uses to detect fraud. To check that your selfie matches the photo on your ID, Stripe's facial-recognition technology takes measurements of your face (facial geometry). Those measurements are biometric data. Stripe may also check your information against other sources, including third-party and government sources, and may process it in the United States and in other countries.

What we receive and keep. Stripe tells us whether you passed and sends us the first name, last name and address on your ID. We keep these with your account, along with the date you were verified, so you only need to verify once.

How we use it. We use your ID check to confirm that the person ordering is you, to decide whether an order needs review before it ships, to prevent fraud and misuse of our tools (including a tool that isn't returned, is returned damaged or is missing from the return box), and, if there's a dispute, to show that you placed the order and accepted your agreement. In a payment dispute we may tell your card issuer that you passed our ID check and when. We don't use it for marketing or routine billing. We share your ID images and details only with Stripe and the companies that host our systems, or when the law requires it, for example under a subpoena or court order.

What we can see but don't copy. Our team can view your ID images, your selfie and the details read from your ID in our Stripe account, and does so only if an order needs a manual review, you ask us to help with your verification, or a tool isn't returned, comes back damaged or is missing from the return box, or there's a payment dispute. We don't download or copy them onto our own systems.

What we never receive. Stripe doesn't share the facial measurements with us. ToolBNB never receives or stores them.

Consent. Before Stripe's screens open, we ask for your consent at our ID-check step and record it on our servers, with the date and time, the version of the consent text you saw, your IP address and your browser information. We ask separately for your consent to Stripe using this data for its own purposes. Stripe also asks for your consent in its own screens before it captures anything. You can withdraw your consent at any time by emailing info@toolbnb.net. We'll then have Stripe redact your verification data and remove your verification from our records.

Retention and destruction schedule:

  • Facial measurements. Stripe says it permanently deletes these from its systems within one year after your verification. ToolBNB never holds them.
  • ID images, selfie and the details read from your ID. Stripe stores these for us. We have Stripe redact them no later than 24 months after your last order or message to us, or sooner if you ask or withdraw your consent, or once we no longer need them for the purpose above.
  • Verified name and address in our records. We keep these while your account is open. We delete them when you close your account, withdraw your consent or ask us to delete your verification, and in any case no later than 24 months after your last order or message to us.
  • We review this data at least once a year and delete what we no longer need within 45 days.
  • If a security incident may have affected biometric data or ID images, we follow our written incident-response procedure, work with Stripe to investigate, and notify you as the law requires.

We don't keep biometric data, or have Stripe keep it for us, longer than this schedule allows unless a valid warrant or subpoena requires it.

How we protect and limit it. We never sell, lease or trade your biometric data or ID information, and we don't otherwise profit from it. We don't disclose information from your ID check to anyone other than Stripe and the companies that host our systems for us (Section 5), unless the law requires it, for example under a valid subpoena or court order, or we tell your card issuer that you passed our ID check and when, in a payment dispute. We protect it with the standard of care that's reasonable in our industry, and at least as carefully as we protect our other confidential and sensitive information.

Stripe's role. Stripe runs the ID check for us and stores the results on our behalf. Separately, Stripe also uses this data for its own purposes, such as security, fraud prevention, operating and improving its services, and meeting its legal obligations, under its own Privacy Policy (https://stripe.com/privacy) and its Stripe Identity terms. For those purposes Stripe decides for itself how to use the data. In Stripe's screens you may also choose to let Stripe use your images to improve its verification technology. To withdraw that permission, or to ask about data Stripe keeps for its own purposes, contact Stripe at privacy@stripe.com.

If you'd rather not take a selfie. Email info@toolbnb.net before you start. We'll tell you whether we can verify you another way, for example with a document-only check reviewed by our team. Because we ship valuable tools to people we haven't met, we can't ship catalog orders without some form of identity check. Tool requests don't require the ID check.

Deleting your verification data. Email info@toolbnb.net from your account email. We'll have Stripe redact the verification data it stores for us (Stripe says this can take up to 4 days), and we'll delete the verified name and address from our records. To have Stripe delete data it keeps for its own purposes, contact privacy@stripe.com. If you withdraw your consent or have your verification deleted, you'll need to verify again before your next catalog checkout.

Colorado residents: this Biometric Data Notice is our written biometric policy under Colorado law.

5. How we share information

We don't sell your personal information. We don't share it for targeted advertising, and we don't give it to other companies for their own marketing.

We share information only in the following ways.

Service providers that help us run ToolBNB:

  • Stripe, Inc. handles payments, card holds and saved cards, fraud prevention, sales-tax calculation and identity verification. Stripe receives your name and email address; your card and billing details; your shipping name, address and phone number (attached to each payment and used to screen for fraud and calculate sales tax); our internal reference for your account; order amounts; the fraud signals described in Section 2; and your ID-check information. Stripe may also email you payment receipts on our behalf.
  • Auth0, a service of Okta, Inc., handles sign-in. It receives your name, email address, password or other sign-in details, and login records such as IP address and device. Auth0 may also email you to verify your address or reset your password.
  • EasyPost and the carriers it connects us with (such as USPS, UPS and FedEx) handle address checks, shipping labels and tracking. They receive your shipping name, address, phone number and email address, and package details.
  • Resend delivers our emails. It receives your email address and name, and the content of the emails we send you or send ourselves about your order. That content can include your contact details, shipping address, payment status and copies of chat messages. It never includes information from your ID check.
  • Google Workspace hosts our business inbox. It stores the emails you send us and our copies of order, chat and payment notices.
  • Google Voice carries our business phone line. It handles calls, voicemails and texts you send us.
  • DigitalOcean hosts our website, database and file storage. The information we keep is stored on DigitalOcean's servers.
  • ConvertAPI creates the screenshot of a product page you link in a tool request. It receives the product link. When your browser shows the preview, it also receives your IP address and browser information. ConvertAPI keeps its copy only briefly, under its own retention policy.

These companies handle your information so they can provide their services to us. Some of them, such as Stripe and the shipping carriers, also use it for their own purposes under their own privacy policies.

Sellers we buy from. If we buy a tool from a store or supplier to fill your order or tool request, we may give that seller your name, shipping address and phone number so it can ship the tool straight to you.

Professional advisers. Lawyers, accountants and similar advisers, when we need their advice.

Legal reasons and protection. We may share information to comply with the law or legal process, such as a subpoena or court order; to respond to lawful requests from public authorities; to enforce our agreements; to recover a tool that isn't returned or an amount that isn't paid (for example, through a collection agency or a court, using your account, order and shipping information); or to protect the rights, property or safety of ToolBNB, our customers or others. We don't report to credit bureaus, and we don't allow anyone collecting for us to do so. We share information from your ID check only as Section 4 allows.

Business transfers. If ToolBNB is involved in a merger, a sale of assets, a financing or a reorganization, your information may be transferred to the business that takes over, subject to this policy. Information from your ID check is transferred only as the law allows.

With your consent. We also share information when you ask us to or agree that we can.

6. Cookies, browser storage and Do Not Track

We use only the cookies our site needs to work:

  • Sign-in cookies: our site sets a session cookie when you log in, and Auth0, our login provider, sets its own cookies on its login page to secure sign-in and remember your session.
  • Stripe cookies on our checkout and tool-request pages process payments and help prevent fraud. Stripe's cookie policy describes them (https://stripe.com/cookies-policy/legal).

We also use your browser's storage for your cart and your tool-request details, as Section 2 describes. We don't use advertising cookies, and we don't let ad networks track you on our site.

Do Not Track and Global Privacy Control. We don't track you across other websites, and we don't sell or share your information for advertising. So our site works the same way whether or not your browser sends a "Do Not Track" or Global Privacy Control signal. To detect fraud, Stripe may combine the fraud signals it collects on our pages with information from other businesses that use Stripe. It does this under its own privacy policy.

You can block or delete cookies in your browser settings. If you block the sign-in or Stripe cookies, you won't be able to log in or pay.

7. How long we keep information

We keep information only as long as we need it for the purposes in this policy:

  • Account details: while your account is open. When you ask us to close your account, we delete them, except for the records listed below that we need to keep.
  • Order, payment, shipping, rental and tax records, and the record of the rental agreement version you accepted: 7 years after the order, for tax, accounting and legal reasons and to handle disputes and chargebacks.
  • Saved card: kept with Stripe so we can charge amounts owed under your rental agreement and so you can reuse it at checkout. You can ask us to remove it at any time. Removing it doesn't release an amount already held on it: we still settle your order from that hold, or charge it early, as your rental agreement describes. Apart from that, we make no new charges to a removed card.
  • Identity-verification data: as set out in the schedule in Section 4.
  • Chat messages: while your account is open, unless you ask us to delete them sooner. We may keep messages about an open order, an amount owed or a dispute until it's resolved.
  • Emails in our business inbox, including copies of chat messages and order notices: for the same period as order records.
  • Server logs: no more than 30 days, unless we need them longer to investigate a security issue.
  • Cart and tool-request details in your browser: your cart stays until you check out, remove the items or clear your browser storage. Tool-request details stay until you submit the request or close the tab.

When we no longer need information, we delete it or make it anonymous. Deleted information may stay in our backups for up to 7 days, until those backups are overwritten. Our service providers keep their own records under their own retention policies.

8. How we protect information

We use safeguards that are reasonable for a business of our size. Our site uses encrypted (HTTPS) connections. Your full card number and your ID and selfie images stay with Stripe, not on our servers, and your password stays with Auth0. Only the people who need access to our systems and provider accounts have it. No system is perfectly secure, so we can't guarantee security. If a data breach affects your personal information, we'll notify you as the law requires.

9. Your choices and rights

Anyone can ask us to:

  • tell them whether we hold personal information about them, and give them a copy;
  • correct information that's wrong;
  • delete their information or close their account;
  • remove a saved card; and
  • withdraw consent to the ID check (see Section 4).

How to ask. Email info@toolbnb.net from the email address on your account and tell us what you'd like us to do. We may ask you to confirm some details so we know the request really comes from you. Someone you've authorized in writing can also make a request for you. We'll respond within 45 days. If we need more time, we'll tell you why, and we may take up to 45 more days.

What we may keep. We may keep information we need to finish an open rental, collect an amount owed, recover an unreturned tool, meet tax or other legal obligations, resolve disputes, or enforce our agreements. If that applies to your request, we'll tell you.

Appeals. If we decline your request, you can ask us to reconsider by replying "Appeal" to our answer. We'll respond in writing within 45 days. If we deny your appeal, you can contact your state attorney general.

We won't charge you more or give you a lower level of service for making a request. If you withdraw consent to the ID check or have your verification deleted, you'll need to verify again before your next catalog checkout, because we can't ship catalog rentals without it.

State privacy laws. Some state privacy laws apply only to larger businesses. We offer the choices above to everyone, wherever you live, and if a law gives you more rights, we'll honor them.

California residents: we don't share personal information with other companies for their own direct marketing.

Nevada residents: we don't sell covered information as Nevada law defines it. You can still send a request not to sell to info@toolbnb.net, and we'll respond within 60 days.

Washington residents: please also see our Washington Consumer Health Data Privacy Policy at toolbnb.net/privacy/washington-health-data.

10. Children

Our services are for adults 18 and older. We don't knowingly collect personal information from anyone under 18. If we learn that anyone under 18, including a child under 13, has given us personal information, we'll delete it promptly. Contact us if you believe this has happened.

11. Where we process information

We offer our services in the United States, and we and our main providers store information mainly in the United States. Some of our providers may process information in other countries. For example, ConvertAPI is based in Lithuania and may create screenshots on servers outside the United States, and Stripe may process identity-verification data outside your state or country.

Our site links to other websites, such as product pages and manufacturers' sites. When you visit them, their own privacy policies apply.

13. Changes to this policy

We'll post any update on this page with a new effective date. If a change is material, we'll tell you before it takes effect, by email or with a notice on our site. If we want to use information we already have in a materially different way than this policy describes, we'll ask for your consent first. Earlier versions are available on request.

14. Contact us

For questions or requests, email info@toolbnb.net, or write to Toolbnb LLC, 429 Lenox Ave, Miami Beach, FL 33139, USA.