Summit Shred Swap — Privacy Policy
Version 0.1 — DRAFT for attorney review — September 17, 2026
1. The short version
We collect what we need to verify who you are, run rentals safely and follow the law. We don't sell your personal data. We don't run ad trackers. Your ID photos and selfie live with Stripe, not with us, and we ask Stripe to redact them after your check. You can delete your account any time.
This policy covers summitshredswap.com, our app, and the texts and emails we send. It's part of our Terms of Service. "Community" means the area we serve — currently Summit County, Colorado.
2. What we keep and why
| What | Why we need it | Where it lives | How long |
|---|---|---|---|
| Name, phone number, email, town | Your account, sign-in codes, reaching you, and showing your first name and town to the other party in a rental | Our systems | Until you delete your account |
| Driver's license (or other government ID) images and live selfie | Identity verification — confirming you're a real adult and the person on the ID | Stripe only | Redacted after the check (see the Biometric Data Policy) |
| Verification result: document verified, selfie matched, legal name, date of birth, ZIP and county from your ID | The 18+ check, the Lender residency rule, the local service-fee rate, and the non-return protocol | Our systems | Until you delete your account |
| Residency proof for a manual review (property tax bill, lease, housing letter) | Approving second-home owners and seasonal workers as Lenders | Our systems | Deleted after the decision; we keep only the result |
| Card details | Paying and getting paid | Stripe only — we keep a token and the last four digits | Until you remove the card or delete your account |
| Bank or debit account for payouts (Lenders) | Payouts through Stripe Connect after each confirmed hand-off | Stripe only | Until you close your Connect account |
| Check-in and check-out photos, with time and location | The condition record for damage, late-return and non-return claims | Our systems | 90 days after the rental closes; longer if a claim or legal matter is open |
| Booking messages | Coordinating rentals, safety, resolving claims | Our systems | 12 months after the rental closes |
| Bookings, payments, fees and taxes | Running the marketplace and tax reporting | Our systems and Stripe | As long as tax and accounting law requires |
| Reviews and Shred Score | Trust between Members | Our systems | While your account exists; reviews you wrote may stay up without your name after you leave |
| Referrals and rental credit: who invited you, whether the referral qualified, and your credit balance and history | Running the refer-a-friend program and applying credit at checkout | Our systems | While your account exists; credit history as long as accounting law requires |
| Reports, strikes and ban records | Keeping banned people off the platform | Our systems | Ban records kept indefinitely, with the minimum identity details needed to enforce the ban |
| Support emails and texts | Helping you | Our systems | 24 months |
| Analytics | Understanding how the app is used | Cookie-free, aggregated | Never linked to you |
We keep data longer when a claim, dispute, police report or legal hold is open, or when the law requires it.
3. Identity verification
Every Member verifies their identity through Stripe Identity: an ID scan and a live selfie that Stripe matches to the ID photo. Stripe collects and holds the images and performs the comparison; the images never reach our servers. We receive the outcome listed in the table above, record it, and then ask Stripe to redact the verification session. The selfie match is biometric data under Colorado law. Our Biometric Data Policy explains exactly what's collected, how long anything is kept, and how to withdraw consent. You'll see a consent screen before the selfie step.
4. Payments
Stripe processes every payment, hold and payout. Your card number never touches our servers; we store a Stripe token so we can charge your card for a rental and for anything you owe under a Rental Agreement. Stripe's own privacy policy applies to what Stripe collects.
5. Photos and location
The app asks for camera and location permission when you check gear in or out so it can time- and location-stamp the four condition photos. We don't track your location at any other time. Photos are visible to both parties in the rental and to us.
6. Messages
Booking messages stay in the app. We mask phone numbers and emails until a booking is accepted. We may read messages to enforce our Terms, investigate a report or resolve a claim, and we may share them with law enforcement in a non-return case.
7. Analytics and cookies
We use cookie-free analytics that count page views and app events in aggregate. We don't use advertising cookies, tracking pixels or cross-site tracking. We use only the strictly necessary cookies or tokens that keep you signed in, plus a 30-day cookie that remembers which Member's invite link brought you here so the referral can be linked to your new account.
8. Who we share data with
- The other party in a rental: your first name, town, Shred Score and verified badge, and — once a booking is accepted — the contact details and handoff location you choose to share.
- The Member who invited you: your first name and last initial, when you joined, and whether the referral has qualified — never what you rented or listed.
- Stripe: for verification, payments and payouts.
- Service providers that host our systems, send our texts and emails, and run our support tools, under contracts that limit them to working for us.
- Law enforcement and the Lender in a non-return or theft case, as described in the Terms and the Rental Agreement.
- Anyone the law requires — a valid subpoena, court order or tax authority.
- A successor if we sell or merge the business; the buyer must honor this policy.
We do not sell personal data, and we don't share it for targeted advertising.
9. Texts
By signing up with your phone number you agree to receive transactional texts from us: sign-in codes, booking updates, handoff reminders, late-return warnings and claim notices. Message and data rates may apply. Reply STOP to stop; without texts you can't sign in, and we'll need to reach you by email instead. We don't send marketing texts unless you separately opt in.
10. Your Colorado privacy rights
If the Colorado Privacy Act applies to us, you have the right to know what personal data we hold about you, get a copy, correct it, delete it, and opt out of sale, targeted advertising and profiling with legal effects — none of which we do. Email [privacy@summitshredswap.com] and we'll respond within 45 days. If we deny a request, you can appeal by replying to our decision.
We honor these rights for every Member whether or not the law requires it.
11. Delete my account
Go to Settings, then Delete my account, or email [privacy@summitshredswap.com]. We'll close your account and delete your personal data within 30 days, except: records we must keep for tax, accounting or legal reasons; open claims, disputes or police matters; ban records; and reviews you wrote, which stay up without your name. Verification outcomes are deleted with the account. Photos and messages follow the schedule in the table.
12. Security
We encrypt data in transit and at rest, limit staff access to what a job needs, log access to verification outcomes, and rely on Stripe for anything involving IDs, biometrics and cards. No system is perfectly secure. If a breach affects your data we'll tell you as the law requires.
13. Kids
You must be 18 to use Summit Shred Swap. We don't knowingly collect data from anyone under 18; if we learn we have, we delete it.
14. Changes
We'll post changes here and update the date. For material changes we'll email you at least 14 days ahead.
15. Contact
Summit Shred Swap LLC · [Mailing address], Frisco, CO 80443 · [privacy@summitshredswap.com]
Version 0.1. Questions: text or email us — the number is on every booking.