Privacy policy
Last updated: April 2026
What we collect
When you place an order or sign up for email we collect your name, email, phone, delivery address if applicable, and order history. Payment details are handled by Stripe and never stored on our servers.
How we use it
To process your order, communicate about it (SMS and email), and with your opt-in, to send occasional promos and new menu drops. We do not sell your data. We do not share it with third parties except the processors who help us (Stripe, Twilio, Resend, delivery providers).
SMS messaging
By providing your phone number you consent to receive SMS order updates. Message and data rates may apply. Reply STOP to opt out.
Do Not Sell or Share My Personal Information
We don't sell your personal information to third parties. We share it only with the service providers we need to fulfill your order — payment processors (Stripe), delivery couriers, and email/SMS providers acting on our behalf.
To formally opt out of any cross-context behavioral advertising under CCPA, sign in to your account and submit a deletion request. We respond within 15 business days.
Your rights
You have the right to access, correct, or delete the data we hold on you (GDPR Article 15-17 / CCPA equivalents).
- Access + export: sign in to your account and use the request data export flow — we send a JSON copy within 30 days.
- Correction: update your profile fields directly in your account, or email us for fields you can't edit yourself.
- Deletion: sign in and submit a deletion request — we anonymize your PII immediately and finalize within 30 days. Tax-related order records (orders, payments) are retained for 7 years per US tax law, but with your name, email, phone, and address removed.