Privacy Policy

1. Information We Collect

2. How We Use Your Information

We use the collected information to:

• Provide, operate, maintain and improve the Platform (including warehouse storefronts, search, carts and order coordination).
• Process account registration, prop listings, rental requests, order acceptance and the ongoing rental lifecycle.
• Enable communication between Warehouses and Renters (chat, document exchange, pickup/return coordination, support, dispute resolution).
• Triage the first message of a support ticket or report with automated tools that prepare notes for our team and, on some signed-in tickets, a first reply that is labelled as automated. We do not send your name, email address or account identifiers to the AI provider, and we mask email addresses, phone numbers and links in the text you write before it is sent. Other details you choose to write in can still reach the provider. People make every decision about your account and your requests, and everything after the first message is handled by our team.
• Prevent fraud and detect abusive or illegal activity.
• Send important transactional notifications and - where permitted - product updates and marketing communications. You can opt out of marketing at any time.
• Provide Warehouses with aggregate metrics on the visibility of their own props and collections.
• Comply with legal obligations, respond to lawful requests from authorities, enforce our Terms of Service and protect our rights.

3. Sharing of Your Information

We may share your personal information with:

• Other Platform users - to enable the rental flow. A Warehouse sees the orders, carts and messages you direct to it (and your name and profile picture); you see the Warehouse's public profile and the messages it sends back. We do not disclose your email address or phone number to the counterparty unless you choose to share them inside the conversation.
• Service providers acting on our behalf (such as cloud hosting, email delivery and an AI model provider that helps us triage support requests), who are contractually obligated to protect your data and process it only on our instructions.
• In the event of a merger, acquisition, reorganization or sale of assets - to the relevant third party (with notice where required).
• Public authorities, courts or regulators when required by law, subpoena, court order or to protect rights, property or safety.

WareRent does not process rental payments and does not handle payment card data. Pricing, deposits and payment terms are agreed and settled directly between Warehouse and Renter outside the Platform.

We do not sell your personal information to third parties.

5. International Data Transfers

The Platform operates internationally. Your personal data may be transferred to, stored and processed in countries outside your country of residence (including countries that may offer a different level of data protection).

Whenever we transfer personal data outside the EEA or other jurisdictions with adequacy decisions, we use appropriate safeguards such as Standard Contractual Clauses or other legally recognized mechanisms.

6. Your Rights

Depending on your location and applicable law (GDPR, CCPA/CPRA and similar), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention obligations)
• Object to or restrict certain processing activities
• Receive your data in a structured, commonly used and machine-readable format (data portability)
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local data protection authority

To exercise these rights, open a request through the support portal. If you cannot sign in, use the contact form.

You can also act directly from your account: download a copy of your personal data or delete your account at any time from your profile settings.

7. Trust & Safety Data

To keep the Platform safe, we process certain data classes related to peer-level blocks, reports, and staff moderation actions. The lawful basis for each class is listed below.

When account deletion is completed, direct profile details are anonymized. Some report, action, appeal, and evidence records may be retained where needed for safety, fraud prevention, legal obligations, or legal claims. Access to retained records is restricted, and live account references are removed when the applicable retention process runs. You have the right to access, correct, or object to processing of this data subject to the retention periods and legal exceptions stated.

8. Data Retention

We retain your personal information for as long as necessary to provide the Services and to comply with applicable tax, accounting and consumer-protection law. Selected periods by category:

• Account and profile data: while your account is active; anonymised after a 30-day deletion grace period, when your billing and tax details are also deleted. The anonymised record holds no personal data and is removed once no order, rating, or ticket still refers to it.
• Orders, chat messages, and order documents: 5 years after the order ends, the general limitation period for contract claims under Bulgarian law, so a dispute can still be resolved. Ratings stay on the rated profile.
• Support tickets, messages and attached files: 5 years after the ticket closes. A file you upload but never send is deleted after 24 hours.
• Invoices: 10 years, as the Bulgarian Accountancy Act (art. 12) requires.
• Pseudonymous page-view events: 30 days in raw form, then aggregated and no longer individually retrievable.
• Searches and cart additions: 91 days in raw form, used only to show Warehouses aggregate demand per category, or until you delete your account if that comes first.
• Invitations: until answered or expired after 7 days, then 90 days, so the person who sent one can see what became of it.
• Deleted teams: a team its owner deletes can be restored for 30 days, after which its Shoots, templates and collections are erased.
• Session tokens and authentication data: until logout, expiry, or account deletion. Passkeys are kept until you remove them or delete your account.

When you delete your account, we remove or anonymise your personal data, except where we are required or permitted by law to retain specific records for the applicable statutory period.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse or alteration. However, no method of transmission over the Internet or electronic storage is fully secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Platform is intended for adults; our Terms require all users to be at least 18 years old. We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact legal@robforge.io and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will be posted here with an updated "Last updated" date.

Material changes will be communicated through prominent notice on the Platform and/or via email (where appropriate).