Toolie LogoToolie

Privacy Policy

Effective 2026-05-03 · Version 2026-05-03

1. Who we are

Toolie ("we", "us") is the operator of a Canadian peer-to-peer tool-rental marketplace. This Privacy Policy explains what personal information we collect, why we collect it, and how we handle it.

Privacy questions or requests can be sent to our Privacy Officer at privacy@toolio.ca.

2. Information we collect

You give us

  • Account info: name, email, password (hashed), profile photo, bio.
  • Address and location data when listing a tool or completing a rental.
  • Bank/payout details (collected and stored by Stripe; we receive only metadata).
  • Payment-card details (collected and stored by Stripe; we receive only the last 4 digits and a token).
  • Messages exchanged with other users on the platform.
  • Photos uploaded for listings or as evidence in disputes.

Collected automatically

  • Device information, IP address, browser type, operating system.
  • Usage data: pages visited, actions taken, timestamps.
  • Cookies and similar technologies (see our Cookie Policy).

From third parties

  • Google (if you sign in with Google): name and email address.
  • Stripe: payment-method status, payout status, dispute outcomes.

3. Why we use it (purposes)

  • To create and manage your account.
  • To facilitate rentals, payments, and payouts.
  • To prevent fraud, abuse, and unsafe behaviour.
  • To comply with legal obligations (tax, anti-fraud, dispute resolution).
  • To improve and secure the Service.
  • With your consent, for analytics and marketing.

4. Legal basis (Quebec Law 25)

We rely on the following bases to process your personal information:

  • Contract performance: processing necessary to deliver the Service you requested (e.g., processing a payment).
  • Legal obligation: tax remittance, anti-money-laundering, dispute handling.
  • Consent: for non-essential cookies (analytics, marketing) and for optional communications.
  • Legitimate interest: fraud prevention, security, and platform integrity, where it does not override your fundamental rights.

5. With whom we share

  • Stripe — for payments, payouts, KYC/onboarding, and tax. See the Stripe Privacy Policy.
  • AWS — for hosting and storing photos uploaded to the platform.
  • Google Maps / Mapbox — for geocoding and map display.
  • Other users — we share certain profile information (name, photo, listing location at city granularity) with other users so the marketplace can function.
  • Authorities — when required by law, court order, or to protect rights.

6. Where we store your data

Your data is stored on servers operated by AWS in Canadian regions where reasonably possible. Some service providers (e.g., Stripe, Google) may process data outside Canada, in which case we ensure adequate contractual protections.

7. How long we keep it

  • Account information: until you close your account, then deleted within 90 days, except where retention is required by law.
  • Transaction records: 7 years (Canadian tax record-keeping).
  • Messages: 24 months after the last interaction.
  • Dispute evidence: 3 years after dispute resolution.
  • Marketing analytics: 14 months.

8. Your rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your account and associated data, subject to legal retention.
  • Withdraw consent for analytics or marketing at any time.
  • Lodge a complaint with the Office of the Privacy Commissioner of Canada or, for Quebec residents, the Commission d'accès à l'information.

To exercise any of these rights, contact privacy@toolio.ca. We will respond within 30 days.

9. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, password hashing, encryption at rest where supported by our providers, and access controls. No system is completely secure; we encourage you to use a strong, unique password.

10. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children.

11. Automated decision-making

We do not make decisions producing legal effects about you based solely on automated processing. Dispute resolution is reviewed by a human.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will trigger an in-app re-acceptance prompt at next sign-in.