Privacy policy
Last updated: May 3, 2026
Heads up: this is founder-written placeholder structure for PIPEDA expectations — not final legal advice. Saro replaces prose flagged below before launch.
What we collect
Phone number (for OTP login), rough location when you choose a pickup neighborhood, order history (what you bought, from whom, when), photos you upload to reviews or chats, and messages between you and cooks inside the app. We do not buy data lists and we do not run creepy cross-site tracking on this marketing site.
How we use it
To run pickup: confirm identity, route orders, show you relevant cooks, prevent fraud, and fix things when they break. We also use aggregated usage to make the product less annoying — never to sell your story to advertisers.
Who we share with
Stripe processes card payments. Twilio / Firebase delivers OTP texts. Stream powers cook–buyer chat. Those vendors only get what they need to do their job. We do not sell personal information to third parties.
How long we keep it
While your account is active we keep what the marketplace needs to function. Tax and accounting obligations may require keeping certain records up to seven years. Deleted accounts: plan for a 30-day grace window, then permanent purge of buyer-facing profile data (exact clock should match backend implementation).
Your rights
Access, correction, deletion, and portability — Canadian privacy law expects this, and we want to be the kind of company that makes it easy. Start with the account portal; if something is stuck, email us below.
Contact
Privacy questions: info@eatcircle.com