Privacy Policy

Last Updated: Pending — set upon attorney review

Draft — not final. This draft has not been reviewed by qualified legal counsel, particularly regarding state-specific privacy laws (e.g., the Texas Data Privacy and Security Act) and school-related data handling (FERPA touchpoints, if any). This document has not yet been reviewed by an attorney and is not intended as legal advice.

1. Overview

This Privacy Policy explains how StanDeliver ("we," "us") collects, uses, and shares information when you use our platform to order food and beverages at participating schools, colleges, and stadiums ("Venues"). It applies to Customers, Vendor staff, and Venue administrators who use the Service.

2. Information We Collect

Information you provide directly:

Name, phone number, and/or email address (for account creation and order updates)
Payment information (processed directly by Stripe and/or Square — StanDeliver does not store full card numbers on its own servers)
Order details (items, seat/section, delivery vs. pickup preference)
Any information you submit in support requests

Information collected automatically:

Device and browser information, IP address, and general usage data (for security monitoring and service reliability)
Approximate seat/section location you provide for delivery routing — this is not continuous or precise geolocation tracking of your physical location

Information from Vendors and Venues:

Order status updates and fulfillment confirmations from Vendor kitchen/runner systems

3. How We Use Information

We use information to: process and fulfill your orders; send order-status SMS/email notifications; operate fraud prevention and platform security monitoring; provide customer support; improve the Service; and comply with legal obligations (including those related to payment processing and, where applicable, tax reporting).

We do not sell your personal information to third parties.

4. SMS Messaging and Consent (TCPA)

If you provide a mobile number and opt in, you consent to receive transactional SMS messages about your order (confirmations, ready-for-pickup/delivery alerts). Consent to receive transactional messages is required to use SMS-based order updates but is not a condition of using the Service generally if an alternative notification method is offered.

If you separately opt in to promotional messages, you may unsubscribe at any time by replying STOP. Reply HELP for assistance. Message and data rates may apply; message frequency varies based on your order activity. We do not share your phone number with third parties for their own marketing purposes.

[Attorney/ops note: confirm A2P 10DLC brand and campaign registration is completed with your SMS provider before this policy goes live — carriers will block unregistered traffic, and TCPA opt-in language here should match the actual opt-in flow in the product.]

5. Minors' Information

Many of our Venues are high schools, so a portion of our Customers are minors. We collect only the minimum information necessary to fulfill an order (typically a first name, phone number for order updates, and payment authorization). We do not knowingly collect personal information from children under 13 beyond what is necessary to complete a specific order, and we do not knowingly permit children under 13 to create standalone persistent accounts. If we become aware that we have collected personal information from a child under 13 in a manner inconsistent with this policy, we will delete it, consistent with obligations under COPPA.

Parents or guardians with questions about a minor's information can contact us at [email protected].

6. How We Share Information

With Vendors: order contents and delivery location, so they can prepare and fulfill your order.
With payment processors (Stripe, Square): transaction data necessary to process payment and route funds to the Vendor's account.
With Venues: aggregate or order-level data as needed for venue operations, reconciliation, and — where applicable — compliance reporting.
With service providers: infrastructure, hosting, SMS delivery, and error-monitoring vendors, under confidentiality obligations.
For legal reasons: if required by law, subpoena, or to protect the rights, safety, or property of StanDeliver, our users, or the public.

7. Data Security

We use industry-standard safeguards, including encrypted connections, role-based access controls, and database-level row security policies that restrict Vendor and Venue staff to only the data relevant to their role. No system is perfectly secure, and we cannot guarantee absolute security.

8. Data Retention

We retain order and account information for as long as reasonably necessary to provide the Service, meet financial/tax record-keeping obligations, and resolve disputes, after which it is deleted or anonymized in accordance with our internal retention schedule.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, or delete your personal information, and to opt out of promotional communications. To exercise these rights, contact [email protected].

[Attorney note: confirm whether Texas Data Privacy and Security Act (TDPSA) thresholds apply to StanDeliver's current data volume, and add a formal rights-request process section if so.]

10. Children Under 13 / COPPA Note

See Section 5 above.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected in the "Last Updated" date above.

12. Contact

Questions about this Privacy Policy: [email protected]

Questions? Contact us at [email protected]