Privacy Policy

Last updated: June 2026

TownShed Privacy Policy

Prime Exchange Capital LLC ("we," "us," or "our") operates TownShed. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform.

1. Information We Collect

We collect the following types of information: Account Information: Full name, email address, phone number, neighborhood, and ZIP code when you register. Profile Information: Bio, profile photo, and any other information you choose to add. Listing Information: Photos, descriptions, pricing, and location data for items you list. Transaction Information: Booking dates, rental amounts, payment status, and communication records. Payment Information: We do not store payment card numbers or bank credentials. Payment processing is handled by Stripe and Plaid, who have their own privacy policies. Device & Usage Information: IP address, browser type, device information, and how you interact with our platform. Communications: Messages sent through our in-app chat system.

2. How We Use Your Information

We use your information to: - Provide and improve the TownShed platform - Process rental transactions and payments - Verify your identity and prevent fraud - Send transactional notifications (booking confirmations, payment receipts) - Resolve disputes between users - Comply with legal obligations - Respond to customer support requests - Send platform updates (you can opt out at any time)

3. Information Sharing

We share your information only as follows: With Other Users: Your public profile (name, neighborhood, rating, verified badges) is visible to other users. Your exact address is only shared with confirmed booking participants. With Service Providers: We share data with Stripe (payments), Plaid (bank connections), Supabase (database hosting), and Vercel (app hosting) as necessary to operate the platform. For Legal Compliance: We may disclose information if required by law, court order, or to protect the rights and safety of our users. We do NOT sell your personal information to third parties.

4. Location Data

When you create a listing, we store your item's location. We display only an approximate location (fuzzed ±0.5 miles) to the public. Your exact address is only revealed to confirmed renters after a booking is approved. We strip all GPS/EXIF metadata from uploaded photos before storing them on our servers.

5. Data Security

We implement industry-standard security measures including: - All data transmitted over HTTPS/TLS encryption - Passwords hashed with bcrypt (cost factor 12) - Bank tokens encrypted with AES-256 before storage - JWT tokens with short expiration windows (15 minutes) - Row-level security on our database - Rate limiting on all API endpoints - Regular security audits No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal compliance, fraud prevention, or dispute resolution purposes. Transaction records may be retained for up to 7 years for tax and legal compliance.

7. Your Rights (CCPA)

As a California or Florida resident, you have the right to: - Know what personal information we collect about you - Request deletion of your personal information - Opt out of the sale of your personal information (we do not sell your data) - Non-discrimination for exercising your privacy rights To exercise these rights, contact us at [email protected]. We will respond within 45 days.

8. Children's Privacy

TownShed is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that a child under 18 has provided us with personal information, we will delete it immediately.

9. Cookies

We use essential cookies only: - Authentication tokens (JWT) stored as HTTP-only cookies - Session management cookies We do not use advertising cookies or tracking pixels. We do not share cookie data with advertisers.

10. Third-Party Services

TownShed integrates with the following third-party services, each with their own privacy policies: - Stripe (payments): stripe.com/privacy - Plaid (bank connections): plaid.com/legal/privacy-statement - Supabase (database): supabase.com/privacy - Vercel (hosting): vercel.com/legal/privacy-policy

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Your continued use of TownShed after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights: Prime Exchange Capital LLC [email protected] (689) 295-1206 Greater Orlando, Florida For data deletion requests, email [email protected] with subject line "Data Deletion Request."

Questions? Contact us at [email protected]

View Terms of Service →