1. Who We Are
Curbivo is a platform operated by 915 Web Design LLC that provides online ordering, delivery, and loyalty rewards for mobile food vendors. This policy covers how we collect, use, and protect data from both Vendors (our paying customers) and their End Customers (people who order food).
2. Information We Collect
From Vendors:
- Account information (name, email, phone, password)
- Business information (business name, address, hours, menu)
- Payment information (via Stripe Connect — we do not store bank details)
- Location data (GPS coordinates when using "Use My Location")
- Usage data (login activity, settings changes, order management)
From End Customers:
- Order information (name, email, phone number)
- Delivery addresses (for delivery orders)
- Payment information (processed by Stripe — we do not store card details)
- Loyalty program data (points balance, order history, referral codes)
- Location data (for delivery validation and address autocomplete)
3. How We Use Information
- Process and fulfill food orders
- Send order confirmations, status updates, and receipts
- Manage vendor storefronts and admin dashboards
- Operate the loyalty rewards program
- Calculate delivery fees and validate delivery zones
- Generate analytics and reports for vendors
- Send marketing communications (only with opt-in consent)
- Improve the Platform and fix issues
4. Information Sharing
We do not sell personal information. We share data with:
- Stripe — payment processing (PCI-compliant)
- Twilio — SMS notifications (order confirmations, OTP codes)
- Resend — email notifications (order confirmations, receipts)
- Google Maps — address geocoding and autocomplete
- Supabase — database and image storage hosting
- Vercel — application hosting
- Vendors — customer order data is shared with the vendor fulfilling the order
5. Data Security
We use industry-standard security measures including encrypted connections (HTTPS), encrypted API key storage (AES-256-GCM), secure authentication (JWT), and PCI-compliant payment processing through Stripe. We do not store credit card numbers or bank account details.
6. Data Retention
We retain account and order data for as long as your account is active. Vendors may request data export or deletion by contacting us. Customer loyalty data is retained per the vendor's account lifecycle. OTP codes expire after 5 minutes and are automatically cleaned up.
7. Cookies
We use essential cookies for authentication (admin sessions, loyalty sessions) and shopping cart persistence. We use Google Analytics (when enabled by vendors) for usage analytics. We do not use advertising cookies or sell cookie data.
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Opt out of marketing communications
- Export your data (CSV exports available in admin panel)
9. Children's Privacy
Curbivo is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy at any time. Material changes will be communicated via email or the admin dashboard. Continued use of the Platform constitutes acceptance.
11. Contact
Privacy questions? Contact us at david@915webdesign.com
Curbivo is operated by 915 Web Design LLC.