Privacy policy

What we collect

When you place an order or sign up for email we collect your name, email, phone, delivery address if applicable, and order history. Payment details are handled by Stripe and never stored on our servers.

How we use it

To process your order, communicate about it (SMS and email), and with your opt-in, to send occasional promos and new menu drops. We do not sell your data. We do not share it with third parties except the processors who help us (Stripe, Twilio, Resend, delivery providers).

SMS messaging

Text messages are optional. Opting in to SMS is never a condition of placing an order or using our service, and you can order and receive updates by email without agreeing to texts. If you check the optional order-updates box at checkout, we send transactional texts about that order (order confirmed, ready for pickup, out for delivery, delivered), plus one-time sign-in codes when you request them. Message frequency varies, about one to four messages per order. Message and data rates may apply. Reply STOP to opt out and HELP for help. We do not sell, rent, or share your mobile number or opt-in data with third parties for their marketing purposes.

Do Not Sell or Share My Personal Information

We don't sell your personal information to third parties. We share it only with the service providers we need to fulfill your order — payment processors (Stripe), delivery couriers, and email/SMS providers acting on our behalf.

To formally opt out under CCPA/CPRA, use our Do Not Sell or Share form — no sign-in needed; we verify with your email and the last 4 digits of your phone number, and marketing messages stop immediately. This does not delete your account or data.

Your rights

You have the right to access, correct, or delete the data we hold on you (GDPR Article 15-17 / CCPA equivalents).

• Access + export: sign in to your account and use the request data export flow — we send a JSON copy within 30 days.
• Correction: update your profile fields directly in your account, or email us for fields you can't edit yourself.
• Deletion: sign in and submit a deletion request — we anonymize your PII immediately and finalize within 30 days. Tax-related order records (orders, payments) are retained for 7 years per US tax law, but with your name, email, phone, and address removed.