Privacy Policy

BorrowMe (the "Company") is committed to protecting the privacy and security of personal information processed in connection with our peer-to-peer item rental platform. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you access or use our services, website, APIs, or related offerings (collectively, the "Services"). By using the Services, you acknowledge and agree to the practices described in this Privacy Policy.

This Privacy Policy applies to information processed by the Company as a peer-to-peer item rental platform enabling users to borrow and lend personal items within their community. It should be read in conjunction with the Company Terms of Service.

3.1 Personal Information

• Name, email address, and phone number
• Date of birth and city of residence
• Profile photo and bio information
• Payment information and billing address (for transactions)
• Government ID information (for identity verification)

3.2 Usage and Technical Information

• IP addresses and device information
• Browser type and version
• Date and time of platform usage
• Pages visited and features used

3.3 Transaction Data

• Item listings and rental history
• Messages between users
• Reviews and ratings
• Payment transaction records

The Company uses collected information for the following purposes:

• To provide and maintain our peer-to-peer rental services
• To process and complete rental transactions
• To verify user identity and prevent fraud
• To manage user accounts and provide customer support
• To send transactional notifications about your rentals
• To detect and prevent fraud or abuse of our services
• To improve service performance, reliability, and security
• To comply with applicable legal, regulatory, and contractual obligations

Where required by law, the Company processes personal information based on one or more of the following legal bases: performance of a contract, compliance with legal obligations, legitimate business interests (including fraud prevention and security), and consent where applicable.

The Company does not sell or rent personal information. We may disclose information only in the following circumstances:

• With service providers and subprocessors that assist with SMS delivery, hosting, analytics, security, or support
• With telecommunications carriers and aggregators as required to deliver SMS messages
• To comply with law, regulation, legal process, or governmental requests
• To protect the rights, property, or safety of the Company, users, or others
• In connection with a merger, acquisition, financing, or sale of assets

No mobile information is shared or sold for marketing or promotional purposes.

The Company sends SMS messages for transaction notifications, rental reminders, and identity verification purposes. Text messaging originator opt-in data and consent records are collected and stored securely and are not shared with third parties except as required to provide the Services or comply with law.

Users may opt out of any non-essential communications by replying STOP to applicable messages or by contacting Support@borrowme.co.

The Company retains personal and verification data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and prevent fraud or abuse. Retention periods vary depending on data type and legal requirements.

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption, access controls, monitoring, and periodic security assessments. Despite these measures, no method of transmission or storage is completely secure.

Depending on your jurisdiction, you may have rights regarding your personal information, including the rights to access, correct, delete, restrict, or request portability of your data. Requests may be submitted using the contact information below.

The Services are not intended for individuals under the age of 18. The Company does not knowingly collect personal information from children and will delete such information if discovered.

The Company operates primarily from the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States or other jurisdictions.

The Company complies with applicable data protection laws, including the GDPR, CCPA/CPRA, and other U.S. state privacy laws, as applicable to our role as a service provider.

We may update this Privacy Policy from time to time. Material changes will be posted with an updated "Last Updated" date.