Privacy Policy

Last updated October 2, 2026

BorrowTag is run by West River Data Systems LLC ("we", "us"). This policy explains what information we keep, why, and what you can do about it. Questions go to support@borrowtag.com.

Two kinds of information

• Information in a workspace. Organizations ("customers") put details about their equipment and people into BorrowTag. The customer decides what goes in and controls it; we process it on their behalf to run the service. If you're a borrower with a question about your information, ask the organization that lent you the equipment. We'll help them answer.
• Information we keep to run BorrowTag itself. Staff accounts, sign-in records and billing. We're responsible for this.

What we keep

• Staff accounts: name, email address, workspace, role, and when you last signed in and used the app.
• Workspace content: assets, locations and categories; people's names, email addresses, phone numbers, employee IDs, badge numbers and managers; check-outs, returns, reservations, signatures or typed names, condition notes, and a history of every change with who made it.
• Sign-in and security records: when sign-in links are requested and used, failed codes, the IP address, and a description of the browser and device. We use these to keep accounts safe and stop abuse.
• Emails we send: who each notification went to, its subject, and whether it was delivered.
• Billing: when you pay, Stripe handles your card. We keep your plan, billing email, and the details Stripe shares with us (such as card brand and last four digits). We never see or store full card numbers.

Cookies and tracking

• borrowtag.com sets no cookies and has no analytics, ads or third-party trackers.
• The app uses one essential cookie to keep you signed in, for up to 30 days. It isn't used for anything else.
• To make search instant, the app keeps a copy of your workspace's lists on your device. Signing out clears it.
• Sign-in pages use Cloudflare Turnstile to tell people from bots.

How we use it

• To run BorrowTag: sign you in, show and save your workspace, and send the emails your workspace is set up to send (receipts, reminders, overdue notices, invitations).
• To keep it secure: detect abuse, limit sign-in attempts, and investigate problems.
• To support you, bill you, and tell admins about important changes.

We don't sell personal information, share it for advertising, or use workspace content for any purpose other than providing the service to the customer who owns it.

Who processes it for us

• Cloudflare hosts the app, its databases and backups, delivers our email, and provides bot protection.
• Stripe processes payments.

Both handle data under their own security and privacy commitments. Information may be processed in the United States and other countries where they operate. We'll update this list if we add a provider.

How long we keep it

• Workspace content: for as long as the workspace is open. After it closes, we delete it within 30 days. Nightly backups are kept for 35 days and then deleted.
• Sign-in and security records: 12 months.
• Unused sign-in links and codes: deleted after 30 days.
• Billing records: as long as tax and accounting law requires.

Security

Each workspace has its own database. Data is encrypted in transit and at rest. Sign-in links, codes and sessions are stored only as one-way hashes. Staff access is limited to what's needed to run and support the service.

Your choices and rights

• Workspace admins can view, correct, export and delete their workspace's information at any time, and can ask us to close the account.
• Anyone can ask us what information we hold about them, or ask us to correct or delete it, by emailing support@borrowtag.com. For information in a workspace, we'll pass the request to the organization that controls it.
• Depending on where you live, you may have further rights under laws such as the California Consumer Privacy Act. We'll honor them, and we won't treat you differently for using them.

Children and schools

BorrowTag is for organizations, not for children to sign up to. Schools may record students as borrowers. A school is responsible for any notice or consent the law requires, and we use student information only to provide the service to that school.

Changes

If we change this policy in a way that matters, we'll update the date above and email workspace admins before the change takes effect.

Contact

West River Data Systems LLC
Email: support@borrowtag.com