Privacy Policy

RobForge EOOD ("we", "us", "our") operates the WareRent Platform, including the website ware.rent, related mobile applications, and services (collectively, the "Platform").

This Privacy Policy explains how we collect, use, disclose, transfer, store, retain or otherwise process your personal information when you use our Platform as a Warehouse, a Renter, a visitor or in any other capacity.

We are committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable data protection laws, including the EU General Data Protection Regulation. RobForge EOOD is the controller of your personal data.

1. Information We Collect

2. How We Use Your Information

We use the collected information to:

• Provide, operate, maintain and improve the Platform (including warehouse storefronts, search, carts and order coordination).
• Process account registration, prop listings, rental requests, order acceptance and the ongoing rental lifecycle.
• Enable communication between Warehouses and Renters (chat, document exchange, pickup/return coordination, support, dispute resolution).
• Prevent fraud and detect abusive or illegal activity.
• Send important transactional notifications and - where permitted - product updates and marketing communications. You can opt out of marketing at any time.
• Provide Warehouses with aggregate metrics on the visibility of their own props and collections.
• Comply with legal obligations, respond to lawful requests from authorities, enforce our Terms of Service and protect our rights.

3. Sharing of Your Information

We may share your personal information with:

• Other Platform users - to enable the rental flow. A Warehouse sees the orders, carts and messages you direct to it (and your name and profile picture); you see the Warehouse's public profile and the messages it sends back. We do not disclose your email address or phone number to the counterparty unless you choose to share them inside the conversation.
• Service providers acting on our behalf (such as cloud hosting and email delivery), who are contractually obligated to protect your data and process it only on our instructions.
• In the event of a merger, acquisition, reorganization or sale of assets - to the relevant third party (with notice where required).
• Public authorities, courts or regulators when required by law, subpoena, court order or to protect rights, property or safety.

WareRent does not process rental payments and does not handle payment card data. Pricing, deposits and payment terms are agreed and settled directly between Warehouse and Renter outside the Platform.

We do not sell your personal information to third parties.

4. Cookies and Similar Technologies

We use only the cookies strictly necessary to run the Platform - to keep you signed in. We do not set advertising or tracking cookies, do not share cookies with third parties and do not profile you across other websites.

We also use browser local storage (a standard browser feature, not a tracking technology) to save on-device preferences such as your selected colour theme, recent search terms you have typed, and in-progress form drafts. This data stays in your browser and is never transmitted to us as a distinct data collection. You can clear it at any time through your browser settings.

To help Warehouses understand how often their own props and collections are viewed, we record page-view events using a pseudonymous daily visitor hash that is not linked to your account. These raw events are automatically deleted after 30 days and are then available only as aggregate totals. Warehouses see totals and trends only, never your identity.

5. International Data Transfers

The Platform operates internationally. Your personal data may be transferred to, stored and processed in countries outside your country of residence (including countries that may offer a different level of data protection).

Whenever we transfer personal data outside the EEA or other jurisdictions with adequacy decisions, we use appropriate safeguards such as Standard Contractual Clauses or other legally recognized mechanisms.

6. Your Rights

Depending on your location and applicable law (GDPR, CCPA/CPRA and similar), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention obligations)
• Object to or restrict certain processing activities
• Receive your data in a structured, commonly used and machine-readable format (data portability)
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local data protection authority

To exercise these rights, open a request through the support portal. If you cannot sign in, use the contact form.

You can also act directly from your account: download a copy of your personal data or delete your account at any time from your profile settings.

7. Trust & Safety Data

To keep the Platform safe, we process certain data classes related to peer-level blocks, reports, and staff moderation actions. The lawful basis for each class is listed below.

When account deletion is completed, direct profile details are anonymized. Some report, action, appeal, and evidence records may be retained where needed for safety, fraud prevention, legal obligations, or legal claims. Access to retained records is restricted, and live account references are removed when the applicable retention process runs. You have the right to access, correct, or object to processing of this data subject to the retention periods and legal exceptions stated.

8. Data Retention

We retain your personal information for as long as necessary to provide the Services and to comply with applicable tax, accounting and consumer-protection law. Selected periods by category:

• Account and profile data: while your account is active; anonymised after a 30-day deletion grace period; fully removed approximately 10 years after your last invoice.
• Orders and chat messages: retained indefinitely as contractual records.
• Support tickets and messages: 10 years (customer service record).
• Billing and tax records: 10 years (statutory VAT obligation).
• Pseudonymous page-view events: 30 days in raw form, then aggregated and no longer individually retrievable.
• Session tokens and authentication data: until logout, expiry, or account deletion.

When you delete your account, we remove or anonymise your personal data, except where we are required or permitted by law to retain specific records for the applicable statutory period.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse or alteration. However, no method of transmission over the Internet or electronic storage is fully secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Platform is intended for adults; our Terms require all users to be at least 18 years old. We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact legal@robforge.io and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will be posted here with an updated "Last updated" date.

Material changes will be communicated through prominent notice on the Platform and/or via email (where appropriate).