Privacy Policy

PRIVACY POLICY RentMyEquipment · RME Rents · 2Quip.AI · Version 2026.10 · Effective October 27, 2026 1. WHO WE ARE This Privacy Policy explains how 2Quip Corp. ("2Quip", "we", "us"), doing business as RentMyEquipment, RME Rents and 2Quip.AI, collects, uses and shares personal information. It covers rentmyequipment.com and My Rentals, app.2quip.ai, our mobile apps, customer portals, emails, text messages, and support (the "Services"). This policy is a notice. You do not need to sign or accept it. We link it wherever you create an account, sign in or give us information. Our two roles • 2Quip as controller. We decide how your information is used when you have a RentMyEquipment or 2Quip account, book or list on the Marketplace, rent from RME Rents, verify your identity, or visit our websites. This policy applies to that information. • 2Quip as processor (service provider). Equipment rental companies ("Operators") use the 2Quip Platform to run their businesses. When an Operator puts information about its own customers, staff or equipment into the Platform, the Operator controls that information, and we process it on the Operator's behalf under our contract with them. If you are an Operator's customer, the Operator's privacy notice applies to that information. Send privacy requests about it to the Operator, and we will help them respond. 2. INFORMATION WE COLLECT Information you give us • Account and contact details: name, email, mobile number, password or sign-in provider, business name, role, billing and service addresses. • Identity verification: images of your government ID and a selfie, the information on your ID (such as name, date of birth, ID number and expiry), and the verification result. See Section 4 for biometric information. • Rentals and listings: equipment you list or rent, photos, prices, dates, locations (including where equipment is kept), delivery and job-site addresses, pickup and return photos, condition notes, signatures and accepted agreements. • Payments: payment card and bank details are collected and stored by our payment processor. We receive a token, the card brand, the last four digits and the payment history. Owners also give tax and payout information to Stripe for their payout account. • Insurance and claims: certificates of insurance, protection plan choices, damage reports, photos, repair estimates and claim records. • Communications: messages between Renters and Owners, support conversations, call recordings (with notice), reviews, and survey answers. • Business information (Operators): customers, staff, equipment, pricing, orders, invoices and accounting data you put into the Platform. This is processed as described in Section 1. Information collected automatically • Device and usage data: IP address, browser and device type, pages and features used, referring pages, and dates and times. We also keep security and audit logs, including the IP address and browser recorded when you accept a document. • Location: an approximate location from your IP address. A precise location only if you allow it in the app (for example, for driver dispatch or a nearby search). • Equipment telematics: if an Owner connects GPS or telematics devices, the Platform receives equipment location, engine hours, usage and diagnostics. This can reveal where rented equipment is while you have it. • Cookies and similar technologies: see Section 8. Information from others • Operators and Owners who add you as a customer or contact. Team admins who invite you. Stripe (payment and verification results). Sign-in providers you choose. Accounting, telematics and other services an Operator connects. Public sources and fraud-prevention services. 3. HOW WE USE INFORMATION • To provide the Services: create accounts, show listings, process bookings, quotes, orders, invoices and payments, run dispatch and returns, administer RPP and claims, and provide support. • To keep the Services safe: verify identity, prevent fraud, chargebacks and abuse, secure accounts, enforce our Terms, and resolve disputes. • To communicate: send transactional emails, text messages and in-app alerts about your account and rentals, and, with any consent the law requires, marketing. • To improve the Services: analytics, troubleshooting, research and developing features, using de-identified or aggregated data where we can. • AI features: our assistants and agents (including Ronin) process the information needed to complete the task you or your Operator asks for, such as drafting a message, reading a document or suggesting a price. We do not allow our AI providers to train their models on your information. • Advertising: to show ads for the Marketplace on other sites and measure them (Section 8). • Legal and business needs: to comply with law, tax and accounting duties, respond to lawful requests, and in a merger or sale of the business. Where the law requires a legal basis (for example, in the UK, the EU and some other countries), we rely on: performing our contract with you; our legitimate interests in running a safe and useful service; complying with law; and your consent, where we ask for it. You may withdraw consent at any time. 4. IDENTITY VERIFICATION AND BIOMETRIC INFORMATION When you verify your identity, Stripe Identity captures your ID images and a selfie and uses facial-geometry technology to check that the selfie matches the ID photo. Some laws, including those of Illinois, Texas and Washington, treat this as biometric information. • Consent. We ask for your consent before verification starts. You may decline, but some bookings cannot be confirmed without verification. • Use. Biometric information is used only to verify your identity and prevent fraud. It is never sold, leased, traded or used for marketing. • Who has it. Stripe processes biometric information as our service provider. Owners you rent from see only the result and the verified name. They never see your ID images or biometric data. • Retention and destruction. ID images and biometric data are permanently destroyed when the purpose of verification has been satisfied, and in any case no later than 1 year after verification or 3 years after your last interaction with us, whichever comes first, unless the law requires us to keep them longer. We keep the verification result (verified or not, date and verified name) for as long as you have an account, so you do not have to verify again. 5. HOW INFORMATION IS SHARED We do not sell your personal information for money. We share it only as follows: • Between Renters and Owners. When you book, the Owner receives what it needs to complete the rental: your name, contact details, verification result, rental details, delivery address and, for a business, your company. Owners' listing details and pickup locations are shared with Renters. If an Owner hides its exact address, Renters see an approximate area until a booking is confirmed. • Within a business account. Team members at a business may see that business's orders, invoices and requests according to their role. A card payment made at booking is visible only to the person who made it. • With Operators. If you rent from an Operator, we share your information with that Operator, and it uses it under its own privacy notice. • With service providers that help us run the Services (Section 6), under contracts that limit their use of it. • With advertising partners, as described in Section 8. Under some state laws this may be called "sharing" for targeted advertising. • For legal reasons: to comply with law or valid legal process, to protect the rights, property or safety of users, the public or 2Quip, and to investigate fraud or unreturned equipment, including with law enforcement. • In a business transfer, such as a merger, financing or sale of assets, subject to this policy. • With your consent or at your direction, for example when you connect QuickBooks or another service. Text messaging: we do not share or sell mobile numbers or text-messaging consent with third parties or affiliates for their marketing purposes. 6. OUR SERVICE PROVIDERS Our main providers are listed below. Businesses using the Platform can request the current subprocessor list at privacy@rentmyequipment.com, and we give notice of changes as our Terms describe. • Stripe: payments, payouts, card storage, identity verification and fraud screening. • Cloud hosting: Amazon Web Services (United States). • Sign-in and account security: Clerk. • Text messages: Twilio. • Email delivery: Resend. • AI: Anthropic (Claude models), under terms that prohibit training on customer data. • Maps and geocoding: HERE Technologies. • Product analytics: our own first-party analytics, hosted with the Services. • Accounting and telematics: Intuit QuickBooks, and telematics providers such as Verizon Connect, but only where an Operator connects them. • Advertising and measurement: Meta and Google, on our public website pages only. • Local payment processors in some countries, chosen by the Operator (e.g., WiPay in Jamaica). 7. MESSAGES FROM US • Transactional texts and emails about your account, bookings, orders, verification and payments are part of the Services. Text messages are on by default when you give a mobile number. Reply STOP to stop texts and HELP for help. Message and data rates may apply. Essential account emails continue after you opt out of texts. • Marketing emails include an unsubscribe link. Marketing texts are sent only with your separate consent. • Operators' messages: if you are an Operator's customer, some messages are sent on that Operator's behalf and show its business name. You can stop texts by replying STOP, or ask the Operator to update your preferences. 8. COOKIES, ANALYTICS AND ADVERTISING We use cookies and similar technologies to keep you signed in, remember your settings, secure the Services, understand how they are used, and, on our public websites, show and measure ads for the Marketplace on other sites. Advertising partners may collect information about your activity on our sites and use it to show you ads elsewhere. • Your choices: use the "Your Privacy Choices" link in the website footer to turn off advertising cookies, adjust your browser settings, or use the opt-out tools from the Digital Advertising Alliance and Network Advertising Initiative. • Global Privacy Control: we treat a GPC signal from your browser as a request to opt out of sale and sharing for that browser. • Signed-in apps: we do not place advertising cookies inside app.2quip.ai or the signed-in parts of My Rentals. 9. HOW LONG WE KEEP INFORMATION We keep information for as long as needed for the purposes described here, then delete or de-identify it. Typical periods are: • Account information: while your account is open, and up to 3 years after it closes, for disputes and fraud prevention. • Rental, payment, tax and accounting records: 7 years, or as long as tax and financial law requires. • Identity verification: as described in Section 4. • Call recordings: up to 1 year. Security logs: up to 2 years. • Operator data in the Platform: as the Operator directs under its contract, and deleted after the account ends, subject to legal retention. 10. YOUR RIGHTS AND CHOICES Depending on where you live, you may have the right to: • know what personal information we hold and how we use it, and get a copy in a portable format; • correct inaccurate information; • delete your information, subject to exceptions such as completing rentals, legal records and resolving disputes; • opt out of the sale or sharing of personal information, targeted advertising, and profiling that has legal or similarly significant effects (we do not make decisions based solely on automated processing that have legal or similarly significant effects on you); • limit the use of sensitive personal information (we use ID and biometric information only to verify identity); • withdraw consent, object to or restrict processing (in the UK, EU and similar countries); and • appeal our decision on your request, and complain to your data protection authority or attorney general. How to make a request: use the privacy settings in your account, email privacy@rentmyequipment.com, or write to us at the address below. We verify your identity before acting on a request, by confirming details we already hold. An authorized agent may make a request for you with your written permission. We will not discriminate against you for exercising your rights. We respond within the time the law requires, usually 30 to 45 days. These rights apply under state laws including those of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others with similar laws. California residents: the Notice at Collection in Section 14 lists the categories of information we collect, their sources and purposes, who receives them and how long we keep them. In the last 12 months we have not sold personal information for money. We may have "shared" identifiers and internet activity with advertising partners for cross-context behavioral advertising. 11. SECURITY We protect information with administrative, technical and physical safeguards. These include encryption in transit, access controls that keep each business's data separate, role-based permissions, audit logging, and payment card data held only by our PCI-compliant processor. No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires. 12. INTERNATIONAL USERS AND DATA TRANSFERS The Services are based in the United States and are expanding to other countries. If you use them from outside the United States: • Transfers. Your information is transferred to, stored and processed in the United States and in the other countries where our service providers operate. Data protection laws there may differ from those where you live. Where the law requires it, we protect transfers with appropriate safeguards, such as Standard Contractual Clauses (or the UK and Swiss equivalents), and you may request a copy of them. • Local law. We apply the protections your local law requires. Examples include the EU and UK GDPR, Canada's PIPEDA, Jamaica's Data Protection Act, 2020, and similar laws in other countries we expand to. Where local law gives you more rights than this policy, those rights apply. • Local partners. In some countries an Operator may take payments through a local processor. That processor handles your payment information under its own privacy policy. • Local representatives. Where the law requires it, we will appoint a local representative or data protection officer and list their contact details here. • Contact. You may contact us about your rights in any country at the address in Section 15. You also have the right to complain to your local data protection authority. 13. CHILDREN The Services are for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it. 14. CALIFORNIA NOTICE AT COLLECTION (SUMMARY) • Identifiers (name, email, phone, account IDs, IP address). Source: you, Operators, devices. Purpose: providing the Services, security, communications, advertising. Disclosed to: Owners and Operators, service providers, advertising partners (online identifiers only). Kept: as in Section 9. • Customer records and commercial information (addresses, rentals, payments, invoices). Source: you, Operators, Stripe. Purpose: providing the Services, payments, accounting, legal compliance. Disclosed to: Owners and Operators, service providers. • Sensitive personal information (government ID, biometric information, payment account details, precise location if you allow it). Purpose: identity verification, fraud prevention, payments, dispatch. Disclosed to: Stripe and the service providers that need it. Not sold or shared, and not used to infer characteristics about you. • Internet activity and geolocation (usage, approximate location, equipment telematics). Purpose: operating, securing and improving the Services, advertising on public sites. • Audio and visual information (photos, call recordings) and professional information (business, role). Purpose: rentals, claims, support, team accounts. • Inferences (for example, how likely an account is to be fraudulent). Purpose: security only. 15. CHANGES AND CONTACT We will post each new version of this policy with its effective date. For material changes we notify you by email or in the app before they take effect, and we will not use information collected before a change in a materially different way without your consent. Contact: 2Quip Corp., Attn: Privacy, 29085 S. Rogers Rd., Louisburg, KS 66053 · privacy@rentmyequipment.com · (805) 660-9145