Privacy

Grannen is a registered business name of a small Sydney business (ABN 41 948 933 915). We're responsible for the information you give us on grannen.com.au. Questions about it go to info@grannen.com.au.

• Your account: your email address, and the first name you give us.
• Signing in: your IP address and browser type, saved with each sign-in, and when codes were sent to your email. This helps us stop people breaking into accounts.
• When you lend: your listings (name, photos, prices, what's included, a rough value) and your suburb. Photos have their location data removed before they're uploaded.
• When you rent: your requests and bookings, the dates, and your messages with the lender.
• Payments: you type card details into our payments partner's form, not ours. We keep a reference to the saved card and a record of what was charged and refunded.
• Payouts: to pay lenders, our payments partner asks for your identity, date of birth, address and bank details directly. We only see whether setup is done.
• Damage reports: what a lender tells us and the photos they send, and our decision.
• Location: the suburb you pick, so we can show gear near you. If you tap "Use my location", your device's location is used once to find the nearest suburb and isn't saved. We may also guess your area from your IP address; that isn't saved either.
• How you use the site: through Google Analytics (see Analytics and cookies).

We don't ask for your phone number or street address.

• To run your account and sign you in.
• To show your listings and run bookings, including emailing you requests, messages and updates.
• To take payments, pay lenders, give refunds and sort out damage reports.
• To keep Grannen safe from spam, fraud and misuse.
• To understand how the site is used and make it better.
• To meet our legal obligations, like keeping tax records.

• Anyone: your name, when you joined, your suburb (shown as an area about 800 m across, not a pin) and your listings with their photos. Listings can show up in search engines.
• The person you're booking with: your name and your messages. Not your email: our emails come from us.
• Pick-up: you share the exact spot in the chat yourself, once a booking is confirmed. More on pick-up.
• Damage reports: both people in the booking see the report and our decision.

We don't sell your information. We share it only with the services that help run Grannen, and only what they need:

• Our payments partner, for cards, payments, refunds and paying lenders (they also check lenders' identity).
• Mailgun, which sends our emails, including any messages quoted in them.
• Vercel and Neon, which host the site, the database and photos.
• Esri, whose maps your browser loads on listing and suburb pages.
• Google Analytics (see below).
• Anyone the law requires us to share it with.

Some of these services store or process information outside Australia, mainly in the United States. We use established providers with their own privacy and security commitments.

Cookies are small files your browser keeps for a site. Ours:

• Signing in: keeps you signed in, for up to 30 days.
• Your suburb: remembers the area you picked, for a year.
• Google Analytics: shows us how people find and use Grannen: pages visited, searches, how far people get through listing and booking, device, and rough location. It doesn't get your name or email. You can opt out with Google's opt-out add-on or by blocking cookies.
• Our payments partner sets its own cookies on card forms, to spot fraud.

No advertising cookies. You can block or delete cookies in your browser, but you'll need the sign-in one to use your account.

• Your account and listings stay while you use Grannen.
• Removing a listing hides it straight away. We keep a copy, and you can ask us to delete it for good.
• Bookings, payments and damage reports are kept for at least 5 years, because tax law needs those records.

Email info@grannen.com.au and we'll help you:

• see what we hold about you,
• fix anything that's wrong, like your name or email,
• delete your account and listings (we have to keep booking and payment records, see above).

We'll reply within 30 days. If you're not happy with how we handled something, tell us first. You can also complain to the Office of the Australian Information Commissioner.

Signing in uses one-time codes, so there are no passwords to leak. Card details never reach our servers, and everything is sent encrypted. No system is perfect: if something goes wrong that could harm you, we'll tell you.

When this changes, we'll update it here with a new date. If a change affects how we use your information, we'll email you first.