Storbor — Privacy Policy

Storbor Inc. · Version 1.0 · Effective: June 12, 2026 · Last updated: 2026-06-12

1. Who we are

Storbor ("Storbor", "we", "us") is operated by Storbor Inc., a company incorporated federally in Canada and registered in Ontario. Storbor is a peer-to-peer marketplace that connects people who have unused secure space ("Custodians" or "hosts") with people who need short- or long-term storage ("Renters"), and offers an optional local pickup-and-return service in the Greater Toronto Area (GTA).

For privacy questions or requests, contact our Privacy Officer at support@storbor.com.

2. Scope

This Policy applies to the Storbor mobile apps (iOS and Android), the website storbor.com, and related services (together, the "Services"). It explains what personal information we collect, why, how we use and share it, and your rights.

3. Information we collect

You provide to us:

• Account & identity: name, preferred name, email, password, date of birth, and identity-verification information (e.g., government ID details processed by our verification provider). We store a verified/not-verified status, not your ID image, except as needed to complete verification.
• Listings (Custodians): space description, approximate area, exact address (revealed to a Renter only after a confirmed booking), photos, pricing, rules, and availability.
• Bookings (Renters): the items you declare you are storing, dates, and messages.
• Payments: handled by our payment processor (Stripe). We do not store your full card number; we keep limited transaction records and processor identifiers.
• Service requests: pickup/return addresses and notes you submit.
• Communications: messages between members, reviews, and support requests.

Collected automatically:

• Device and usage data (device type, OS, app version, IP address, crash and performance data) to operate and secure the Services.
• Approximate location to show nearby spaces (only with your permission).

From third parties:

• Identity-verification results, payment confirmations from Stripe, and fraud signals.

4. How we use your information

• Provide, operate, and improve the Services (create listings, process bookings and payments, enable messaging, run pickup/return).
• Verify identity and maintain trust and safety (prevent fraud, abuse, prohibited use).
• Process payments, payouts, commissions, and the optional Protection Plan.
• Communicate with you (booking updates, receipts, service messages, and — with your consent — marketing). You can opt out of marketing at any time.
• Send push notifications you enable (e.g., new messages). You control these in your device settings.
• Comply with legal obligations and enforce our Terms.

We rely on your consent, the performance of our contract with you, and our legitimate business interests (e.g., security and fraud prevention) as the bases for processing.

5. How we share information

• Between members, as needed for a booking: a Custodian and Renter see each other's preferred name, photo, verification badge, ratings, and the messages and booking details necessary to complete the transaction. The exact address is shared with a Renter only after a booking is confirmed.
• Service providers ("processors"): payment processing (Stripe), identity verification, cloud hosting and database (Supabase, hosted in Canada), push notification delivery (Expo/Apple/Google), and analytics/crash reporting. They may only use the data to provide services to us.
• Legal and safety: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of users and the public.
• Business transfers: in a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information.

6. Data location and transfers

We host data with providers that store Canadian user data in Canada (our database region is Canada Central). Some service providers (e.g., Stripe, app-store push services) may process limited data outside Canada; where they do, we use providers that offer comparable protection, consistent with PIPEDA.

7. Retention

We keep personal information only as long as needed for the purposes above or as required by law (e.g., tax and transaction records). When no longer needed, we delete or anonymize it. You can request deletion of your account (see Section 9).

8. Security

We use technical and organizational safeguards including encryption in transit, row-level database security so members can read only their own data, access controls, and ID verification. No system is perfectly secure; we cannot guarantee absolute security.

9. Your rights and choices

Subject to applicable law, you may:

• Access, correct, or update your information (in the app or by contacting us).
• Withdraw consent or delete your account; some records may be retained where required by law or to resolve disputes.
• Opt out of marketing and control push and location permissions on your device.
• Ask questions or complain to our Privacy Officer, and to the Office of the Privacy Commissioner of Canada.

Requests: support@storbor.com. We respond within the timeframes required by law.

10. Children

Storbor is for adults 18 and older. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.

11. Third-party links and services

The Services may link to third-party sites or rely on third-party services (e.g., Stripe). Their privacy practices are governed by their own policies.

12. Changes to this Policy

We may update this Policy. We will post the new version with a new "Last updated" date and, for material changes, provide additional notice (in-app or by email). Version history is tracked in our internal Policy Register.

13. Contact

Storbor Inc. — Privacy Officer Email: support@storbor.com · General: hello@storbor.com Mailing address: Brampton, Ontario, Canada