Skip to main content
ToteWorks

Legal

Privacy Policy

Version 2026-08-23

This Privacy Policy describes what information ToteWorks, operated from Cincinnati, Ohio, collects and how we use it.

ToteWorks is the public-facing brand of Crosstown Vending LLC, an Ohio limited liability company. “Tote Works” is a registered Ohio trade name of Crosstown Vending LLC.

1. Information we collect

When you create an account or book a rental, we collect:

  • Account information: your email address and password (managed securely by our authentication provider, Supabase)
  • Contact information: your name and phone number
  • Delivery and pickup addresses, including any access or placement instructions you provide (such as parking, gate codes, or where to leave your totes)
  • Order information: the package you selected, dates, and pricing
  • Contact-form messages you send us

2. Payment information

Payments are processed by Stripe, our payment processor. ToteWorks does not receive or store your full card number, CVV, or other card authentication details - Stripe handles this directly through their own secure, PCI-compliant systems.

3. How we host and store your information

Our application and database are hosted through Supabase, and our website is hosted through Vercel. Address entry and validation use the Google Maps Platform. Each of these providers processes data on our behalf to operate the ToteWorks service.

4. Who can see your information

Your order and contact information - including your delivery/access instructions - is visible only to ToteWorks staff who are actually assigned to work your delivery or pickup, and to ToteWorks owners/managers for order management and support. It is never visible to other customers or to staff who are not assigned to your order.

5. How long we keep information

We keep order and account records for as long as reasonably necessary for business, accounting, and legal purposes, such as resolving a dispute or complying with a legal obligation.

6. Security

We use reasonable technical and organizational measures to protect your information, including role-based access controls and encrypted connections. No method of storing or transmitting data is completely secure, and we cannot guarantee absolute security.

7. Your choices and requests

To ask a question about your data, request a copy of it, or request that we delete it, contact us through our Contact page.

8. Selling personal information

We do not sell your personal information.

This document is a plain-language description of our current practices and is not a certification of legal compliance.