Summit Shred Swap — Privacy Policy
Version 1.2 — Effective October 1, 2026
1. The short version
We collect what we need to verify who you are, run rentals safely and follow the law. We don't sell your personal data. We don't run ad trackers. Your ID photos and selfie live with Stripe, not with us, and we ask Stripe to redact them after your check. You can delete your account any time.
This policy covers summitshredswap.com, our app, and the texts and emails we send. It's part of our Terms of Service. "Community" means the area we serve — currently Summit County, Colorado.
2. What we keep and why
| What | Why we need it | Where it lives | How long |
|---|---|---|---|
| Name, phone number, email, town | Your account, sign-in codes, reaching you, and showing your first name and town to the other party in a rental | Our systems | Until you delete your account |
| Driver's license (or other government ID) images and live selfie | Identity verification — confirming you're a real adult and the person on the ID | Stripe only | Redacted after the check (see the Biometric Data Policy) |
| Verification result: document verified, selfie matched, legal name, date of birth, ZIP and county from your ID | The 18+ check, the local service-fee rate, and the non-return protocol | Our systems | Until you delete your account |
| Card details | Paying and getting paid | Stripe only — we keep a token and the last four digits | Until you remove the card or delete your account |
| Bank or debit account for payouts (Lenders) | Payouts through Stripe Connect after each confirmed hand-off | Stripe only | Until you close your Connect account |
| Check-in and check-out photos, with time and location | The condition record for damage, late-return and non-return claims | Our systems | 90 days after the rental closes; longer if a claim or legal matter is open |
| Booking messages | Coordinating rentals, safety, resolving claims | Our systems | 12 months after the rental closes |
| Bookings, payments, fees and taxes | Running the marketplace and tax reporting | Our systems and Stripe | As long as tax and accounting law requires |
| Reviews and Shred Score | Trust between Members | Our systems | While your account exists; reviews you wrote may stay up without your name after you leave |
| Referrals and rental credit: who invited you, whether the referral qualified, and your credit balance and history | Running the refer-a-friend program and applying credit at checkout | Our systems | While your account exists; credit history as long as accounting law requires |
| Reports, strikes and ban records | Keeping banned people off the platform | Our systems | Ban records kept indefinitely, with the minimum identity details needed to enforce the ban |
| Support emails and texts | Helping you | Our systems | 24 months |
| Analytics | Understanding how the app is used | Cookie-free, aggregated | Never linked to you |
We keep data longer when a claim, dispute, police report or legal hold is open, or when the law requires it.
3. Identity verification
Every Renter verifies their identity through Stripe Identity before paying for a first rental (once, at checkout): an ID scan and a live selfie that Stripe matches to the ID photo. Lenders who never rent are not asked for it; Stripe collects a Lender's identity details separately when they set up a payout account, under Stripe's own privacy policy. Stripe collects and holds the images and performs the comparison; the images never reach our servers. We receive the outcome listed in the table above, record it, and then ask Stripe to redact the verification session. The selfie match is biometric data under Colorado law. Our Biometric Data Policy explains exactly what's collected, how long anything is kept, and how to withdraw consent. You'll see a consent screen before the selfie step.
4. Payments
Stripe processes every payment, hold and payout. Your card number never touches our servers; we store a Stripe token so we can charge your card for a rental and for anything you owe under a Rental Agreement. Stripe's own privacy policy applies to what Stripe collects.
5. Photos and location
The app asks for camera and location permission when you check gear in or out so it can time- and location-stamp the four condition photos. We don't track your location at any other time. Photos are visible to both parties in the rental and to us.
6. Messages
Booking messages stay in the app. We mask phone numbers and emails out of every message; members never see each other's. We may read messages to enforce our Terms, investigate a report or resolve a claim, and we may share them with law enforcement in a non-return case.
7. Analytics and cookies
We use cookie-free analytics that count page views and app events in aggregate. We don't use advertising cookies, tracking pixels or cross-site tracking. We use only the strictly necessary cookies or tokens that keep you signed in, plus a 30-day cookie that remembers which Member's invite link brought you here so the referral can be linked to your new account.
8. Who we share data with
- The other party in a rental: your first name, town, Shred Score and verified badge, plus whatever you write in the booking thread (the meeting place, say). Never your phone number or email.
- The Member who invited you: your first name and last initial, when you joined, and whether the referral has qualified — never what you rented or listed.
- Stripe: for verification, payments and payouts.
- Service providers that host our systems, send our texts and emails, and run our support tools, under contracts that limit them to working for us.
- Law enforcement and the Lender in a non-return or theft case, as described in the Terms and the Rental Agreement.
- Anyone the law requires — a valid subpoena, court order or tax authority.
- A successor if we sell or merge the business; the buyer must honor this policy.
We do not sell personal data, and we don't share it for targeted advertising.
9. Texts
Texts are optional. You opt in by ticking the separate "Yes, text me from Summit Shred Swap" box when you give us a mobile number — at sign-up or on your profile — and you can opt out any time by replying STOP to any text or switching texts off on your profile. Signing up and renting do not require texts; with them off we reach you by email and in the app only, and a rental request may expire before you see it.
What we text: rental requests, questions and replies in your threads, acceptances, booking updates, hand-off reminders, late-return warnings and claim notices — the notifications of the service, since there is no app to push them. Message frequency varies with your activity. Message and data rates may apply. Reply HELP for help or email info@summitshredswap.com. We don't send marketing texts unless you separately opt in.
Your mobile number and your texting consent are never sold, rented or shared with third parties or affiliates for their marketing or promotional purposes. The only companies that see your number are the service providers that deliver our texts, under contracts that limit them to working for us.
10. Your Colorado privacy rights
If the Colorado Privacy Act applies to us, you have the right to know what personal data we hold about you, get a copy, correct it, delete it, and opt out of sale, targeted advertising and profiling with legal effects — none of which we do. Email info@summitshredswap.com and we'll respond within 45 days. If we deny a request, you can appeal by replying to our decision.
We honor these rights for every Member whether or not the law requires it.
11. Delete my account
Go to Settings, then Delete my account, or email info@summitshredswap.com. We'll close your account and delete your personal data within 30 days, except: records we must keep for tax, accounting or legal reasons; open claims, disputes or police matters; ban records; and reviews you wrote, which stay up without your name. Verification outcomes are deleted with the account. Photos and messages follow the schedule in the table.
12. Security
We encrypt data in transit and at rest, limit staff access to what a job needs, log access to verification outcomes, and rely on Stripe for anything involving IDs, biometrics and cards. No system is perfectly secure. If a breach affects your data we'll tell you as the law requires.
13. Kids
You must be 18 to use Summit Shred Swap. We don't knowingly collect data from anyone under 18; if we learn we have, we delete it.
14. Changes
We'll post changes here and update the date. For material changes we'll email you at least 14 days ahead.
15. Contact
Summit Shred Swap LLC · Summit County, Colorado · info@summitshredswap.com
Version 1.2. Questions: text or email us — the number is on every booking.