Last updated: [Date] — Draft for review, not yet finalized by legal counsel.
When you use the Platform, we may collect: your name, email address, and phone number; delivery or pickup addresses; order history; and, for restaurant accounts, business details like menu content, pricing, and payout information. We do not collect or store full payment card numbers — those are handled directly by Stripe.
We use this information to process and fulfill orders, communicate order updates and receipts, operate restaurant accounts and payouts, and improve the Platform. We do not sell your personal information to third parties.
We rely on a small number of third-party providers to operate the Platform, each of which processes relevant data under their own privacy terms:
The third-party providers listed above may store or process your information on servers located outside of Canada, including in the United States. Where that happens, your information becomes subject to the laws of that jurisdiction, which may differ from Canadian privacy law.
We use industry-standard technical safeguards to protect your information, including encrypted data storage (via Supabase), encrypted connections (HTTPS), and secure payment tokenization (via Stripe) so we never handle your raw card details directly. No system is perfectly secure, but we take reasonable precautions appropriate to the sensitivity of the data we hold.
We retain account and order information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. You can request deletion of your account by contacting us.
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access the personal information we hold about you, request corrections, and request its deletion. To make a request, or with any other privacy question, contact our designated Privacy Officer at [privacy@yourdomain.com].
We use essential cookies to keep you signed in and to remember basic session information. We do not use third-party advertising or tracking cookies.
The Platform is not directed at children, and we do not knowingly collect personal information from anyone under 13.
We may update this Privacy Policy from time to time. We'll update the date at the top of this page when we do.
Questions about this Privacy Policy, or requests regarding your personal information, can be sent to [privacy@yourdomain.com].