Privacy Policy

Placeholder. The text below is a structural skeleton awaiting legal review. Do not treat the wording as our final position — it will be replaced before launch.

1. What we collect

When you sign up for an UrbanEater account we collect the information you provide directly (business name, owner email, phone, address) plus standard technical data (IP address, browser user agent, timestamps) needed to operate the service securely.

When your customers place orders through your UrbanEater-hosted menu, we process their order details (items, pickup time, contact info for status notifications) on your behalf as a data processor — you remain the data controller for your customer data.

2. How we use it

Account data is used to provide and improve the platform: authenticating you, processing payments through Stripe, sending operational emails (order confirmations, security alerts), and aggregated analytics about platform health. We do not sell personal data to third parties.

3. Subprocessors

We use a small set of subprocessors to deliver the service: Stripe (payment processing), Keycloak (authentication), Microsoft Azure (hosting + storage), SendGrid (transactional email), and Twilio (SMS notifications, where enabled). Each is bound by their own data-processing agreements.

4. Your rights

You can request access to, correction of, or deletion of your account data at any time by emailing privacy@urbaneater.com. We respond within 30 days. Customer-of-restaurant data requests should be directed to the restaurant operator first; we'll assist where required by law.

5. Data retention

Account data is retained for the life of your account and up to 7 years after closure for tax, accounting, and dispute-resolution purposes. Order data is retained per the operating restaurant's policy. Marketing consents (CASL / CAN-SPAM) are tracked indefinitely as proof of opt-in even after data is otherwise purged.

6. Cookies & tracking

We use first-party session cookies to keep you signed in and track your cart. We do not use third-party tracking cookies for advertising. Analytics is server-side only.

7. Contact

Questions about this policy? Email privacy@urbaneater.com.