Privacy Policy

Effective: March 25, 2026 · Last updated: March 25, 2026

Your privacy is important to us. This Privacy Policy explains how Baseweight Solutions Inc. (“we,” “our,” “Baseweight”) collects, uses, and shares your personal information when you use the GearDrop platform at geardrop.co (the “Platform”).

By using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not consent, please do not use the Platform.

1. Definitions

“Personal Information” means any information that identifies you directly or could be used to identify you, including your name, email address, phone number, mailing address, OAuth provider user ID, payment information, device metadata (IP address, device type, browser, operating system), and location data.

2. Information We Collect

2.1 Information You Provide

  • Account registration: Name, email address, and authentication data when you sign up directly or via Google or Apple OAuth.
  • Operator profiles: Store name, description, pickup locations, and gear listings.
  • Reservations and payments: Booking details, rental dates, and payment information processed through Stripe. We do not store your full credit card number.
  • Liability waivers: Signature and acknowledgment data when you sign a waiver for a rental.
  • Communications: Messages or inquiries you send to us.

2.2 Information Collected Automatically

  • Log data: IP address, browser type and version, device type and operating system, referral source, pages visited, and timestamps.
  • Cookies: Session cookies to keep you logged in, and first-party analytics cookies via Google Analytics for performance and usage analytics.
  • Location data: Approximate location derived from your IP address, used to show relevant gear listings near you.

3. How We Use Your Information

  • To create and manage your account and authenticate your identity.
  • To facilitate gear reservations and process payments between Renters and Operators.
  • To communicate with you about your reservations, account, and Platform updates.
  • To improve the Platform, diagnose technical issues, and analyze usage patterns.
  • To enforce our Terms of Service and comply with legal obligations.
  • To detect and prevent fraud, abuse, or security incidents.

4. How We Share Your Information

We do not sell your personal information. We may share it in the following circumstances:

  • With Operators and Renters: When you make a reservation, relevant booking details are shared with the Operator. Operators' store information is visible to Renters browsing the Platform.
  • Service providers: We use third-party services to operate the Platform, including:
    • Supabase — authentication and database
    • Stripe — payment processing
    • Cloudflare — hosting and content delivery
    • Google Analytics — usage analytics
  • Business transfers: If Baseweight is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you as required by law.
  • Legal requirements: We may disclose information in response to lawful requests by courts, law enforcement, or regulatory authorities. We will notify you where legally permitted.

5. Data Location and Transfers

Baseweight is headquartered in British Columbia, Canada. The Platform uses cloud infrastructure located in the United States and other regions (via Supabase and Cloudflare). Your personal information may be transferred to and processed in the United States, where it may be accessible to U.S. courts, law enforcement, and national security authorities. If you have questions about cross-border data practices, contact us at joe@baseweight.ai.

6. Security

We use appropriate technical and organizational measures to protect your personal information, including TLS encryption for data in transit, encryption at rest, and access controls on our infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide the Platform's services, comply with legal obligations, and resolve disputes. Specifically:

  • Account data is retained until you delete your account.
  • Reservation and payment records are retained as required for tax and legal compliance.
  • Server logs are retained for up to 12 months.
  • Google Analytics data is retained for 14 months.

When data is no longer needed, we delete or anonymize it in accordance with applicable laws.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, update, or request deletion of your personal information.
  • Request a portable copy of your personal information.
  • Withdraw consent or request account deletion at any time.
  • Opt out of marketing communications.

To exercise any of these rights, contact us at joe@baseweight.ai.

9. Children

The Platform is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Where required by law, we will provide at least 30 days' notice before material changes take effect. Your continued use of the Platform after changes become effective constitutes acceptance.

11. Contact

Questions or concerns about this Privacy Policy? Contact our Privacy Officer:

Joe Bowser, Privacy Officer
Baseweight Solutions Inc.
PO Box 19026, Port Moody RPO Rocky Point
BC, Canada V3H 0J1
joe@baseweight.ai