Privacy Policy

1. Who We Are

HeyBins operates a reusable moving-bin rental and franchise platform based in Frederick County, Maryland. Questions about this policy: privacy@heybins.com.

2. Data We Collect

Account & Order Data

• Full name and email address
• Delivery address and service ZIP code
• Order history, rental dates, and deposit status
• Communication preferences and referral codes

Payment Data

Payments are processed by Stripe. HeyBins does not store card numbers. We retain only Stripe-issued tokens, last-four digits, and transaction IDs necessary for refunds and deposit release.

Usage & Technical Data

• IP address and browser/device user-agent
• Pages visited, referrer URLs, and session duration (via Vercel Analytics)
• Core Web Vitals and performance telemetry (via Vercel Speed Insights)
• Cookie consent record (type, timestamp, IP)

3. Cookies & Tracking

We use the following cookies and local storage keys:

You can reject non-essential cookies via the banner shown on first visit or by clearing your browser storage. Essential cookies cannot be disabled without breaking core functionality.

4. How We Use Your Data

• Fulfill rental orders and coordinate delivery/pickup
• Process payments and release security deposits via Stripe
• Send transactional emails (order confirmation, payment receipts)
• Improve site performance and resolve technical issues
• Comply with legal obligations and prevent fraud

We do not sell your personal data. We do not use your data for behavioral advertising.

5. Data Sharing

We share data only with:

• Stripe — payment processing (Stripe Privacy Policy)
• Supabase — database hosting (data processed in the US)
• Vercel — hosting and analytics (Vercel Privacy Policy)
• Resend — transactional email delivery
• Franchise operators — your local operator receives the name, delivery address, and order details needed to fulfill your rental
• Law enforcement when required by valid legal process

6. Data Retention

Order and customer records are retained for 7 years to satisfy accounting and tax obligations. You may request deletion of your account; we will anonymize personal fields while retaining anonymized financial records as required by law.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by emailing privacy@heybins.com. We respond within 30 days. Maryland residents may have additional rights under state privacy law.

8. Children

HeyBins is not directed to children under 13. We do not knowingly collect data from minors. Contact us immediately if you believe a minor has submitted data.