Privacy Policy

StorageFinder (storagefinder.co), operated by TruckPark Pty Ltd (ABN 55 695 402 423), Brisbane, Queensland, Australia ("we", "us", "our") operates an online marketplace that connects storage space hosts with vehicle and equipment owners seeking secure parking and storage in Canada and internationally.

We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), and other applicable provincial privacy legislation. We have implemented practices, procedures, and systems to ensure we manage your personal information in accordance with applicable law and this Privacy Policy.

This Privacy Policy explains how we collect, hold, use, and disclose your personal information when you use our website and services at storagefinder.co and associated domains.

By using StorageFinder, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described in this policy.

Under PIPEDA, we collect personal information only with your knowledge and consent, except where applicable law permits otherwise (PIPEDA Principle 4.3 - Knowledge and Consent). We acknowledge that you may prefer to limit the personal information you share with us. However, we are required to identify you in order to provide our services, process payments, verify your identity, and maintain the integrity of our marketplace. Anonymous use of our services is not practicable. You may withdraw consent at any time, subject to legal and contractual restrictions, by contacting us, though withdrawal may prevent us from continuing to provide services to you.

Under PIPEDA Principle 4.4 (Limiting Collection), we collect personal information only for purposes a reasonable person would consider appropriate in the circumstances and that a reasonable person would expect. We collect your information for the following purposes:

• To create and manage your account
• To facilitate bookings between hosts and storers
• To process payments and payouts securely
• To verify user identity and prevent fraud
• To enable communication between users
• To provide customer support and resolve disputes
• To improve our services, including search relevance and user experience
• To send transactional notifications (booking confirmations, payment receipts, messages)
• To send marketing communications (only with your consent, and you can opt out at any time)
• To comply with legal obligations

Under PIPEDA Principle 4.5 (Limiting Use, Disclosure, and Retention), we use or disclose personal information only for the purposes for which it was collected, except with your consent or as required by law.

We may disclose your personal information to:

• Other users: hosts see storer names, vehicle details, and booking dates; storers see host names and listing details
• Payment processors: Stripe, for processing payments, payouts, and identity verification
• Service providers: hosting providers, email services, analytics tools, and AI services that assist with platform functionality
• Law enforcement or regulators: where required by applicable law, by court order, or to protect the safety of our users

We will never sell your personal information to third parties for marketing purposes.

Some of your personal information may be disclosed to overseas recipients or processed outside Canada:

• Stripe: payment data and identity verification documents may be processed in the United States and other countries where Stripe operates. Stripe maintains privacy practices consistent with PIPEDA requirements
• Supabase: our database and authentication infrastructure is hosted on AWS, primarily in the ap-southeast-2 (Sydney, Australia) region. Under PIPEDA's accountability principle, we remain responsible for personal information transferred to our service providers regardless of where it is processed.
• Google Gemini AI: listing description text (not personal information such as addresses, names, or contact details) may be processed by Google's AI services for generating and improving listing descriptions. Google processes this data in accordance with their Cloud Data Processing Addendum. Users can opt out by writing their listing descriptions manually.

We take reasonable steps to ensure that all service providers who process your personal information on our behalf do so in a manner consistent with PIPEDA's requirements. By using our services, you consent to the cross-border transfer of your personal information as described above.

We take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up to date, complete, and relevant.

You can update your personal information at any time through your account settings. We encourage you to keep your details current to ensure smooth communication and accurate bookings.

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with password hashing and optional multi-factor authentication
• Role-based access controls limiting internal access to personal information
• Regular security reviews and monitoring of our systems
• Payment card data handled exclusively by PCI-DSS compliant payment processor (Stripe)

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account data: retained for the life of the account plus 6 years from the end of the relevant tax year (Income Tax Act s.230 and Excise Tax Act s.286, covering income tax and GST/HST records)
• Booking and payment records: as required by applicable tax law
• Messages: 3 years after booking completion
• Analytics data: 26 months

When personal information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify it.

Under PIPEDA, we are required to notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) of privacy breaches that create a real risk of significant harm. As a matter of internal process, we target notification within 72 hours of becoming aware of a notifiable breach. We maintain an internal data breach response plan and a breach log as required by the Breach of Security Safeguards Regulations (SOR/2018-64), which must be retained for 24 months from the date of each breach determination. We will take all reasonable steps to contain and remediate any breach as quickly as possible.

Under PIPEDA, you have the following rights in relation to your personal information:

• Access: request access to the personal information we hold about you (PIPEDA Principle 4.9 - Individual Access). We will respond within 30 days of receiving your request, or notify you if we require an extension.
• Correction: request correction of inaccurate or incomplete personal information (PIPEDA Principle 4.9 and s.12 of PIPEDA).
• Withdrawal of consent: withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal and contractual restrictions. Withdrawal may limit our ability to provide services to you.

You can manage much of your information directly through your account settings. For formal requests, please contact us at hello@storagefinder.co.

We may refuse access to personal information in limited circumstances permitted by PIPEDA, such as where providing access would disclose personal information about a third party, would be subject to solicitor-client privilege, or would reveal confidential commercial information. We will provide written reasons if we decline.

If you believe we have mishandled your personal information, please contact our Privacy Officer at hello@storagefinder.co.

If you believe we have not handled your personal information in accordance with PIPEDA or applicable provincial privacy legislation, please contact us first. We aim to resolve complaints within 30 days. If you are not satisfied with our response, you may contact the federal privacy regulator:

Office of the Privacy Commissioner of Canada (OPC)
Website: www.priv.gc.ca

We use cookies and similar tracking technologies to improve your experience on our platform. These include:

• Essential cookies: required for core functionality such as authentication, session management, and security
• Analytics cookies: help us understand how users interact with our platform so we can improve our services
• Preference cookies: remember your settings and preferences (such as search filters and location)

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent some features from functioning correctly.

Our marketing communications comply with the Canada's Anti-Spam Legislation (CASL), which requires us to obtain your express consent before sending commercial electronic messages. We will only send commercial electronic messages with your consent. Every marketing email includes a functional unsubscribe link, and we will process unsubscribe requests promptly.

You can manage your email preferences at any time through your account settings at Settings > Notifications.

Our platform integrates with the following third-party services, each with their own privacy policies:

• Stripe: payment processing, payout management, and identity verification. Stripe's privacy policy is available at stripe.com/ca/privacy
• Google Maps Platform: map display, geocoding, and address autocomplete for displaying listing locations. Google's privacy policy is available at policies.google.com/privacy
• Google Gemini AI: used to assist with generating listing descriptions. Only listing text is submitted - personal information is not sent. Content submitted for AI processing is subject to Google's Privacy Policy
• Supabase: database hosting, authentication, and file storage. Supabase's privacy policy is available at supabase.com/privacy

We encourage you to review the privacy policies of these third-party services to understand how they handle your data.

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email for significant changes
• Display a prominent notice on our platform when appropriate

Your continued use of StorageFinder after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer:

Privacy Officer
StorageFinder (storagefinder.co), operated by TruckPark Pty Ltd (ABN 55 695 402 423), Brisbane, Queensland, Australia
Email: hello@storagefinder.co