Privacy Policy

We collect information you provide directly and information generated through use of the Platform:

Account information

• Name and email address (required for all accounts)
• Seller-specific: business name, city, state, cottage food registration documents, and Stripe Connect account information
• Profile photo (optional)

Order and transaction data

• Products ordered, quantities, and amounts
• Pickup location and scheduled pickup time
• Order status history
• Payment intent IDs and transaction metadata (not full card numbers; see Stripe section)

Messages

• Messages sent between Buyers and Sellers through the Platform’s messaging system, associated with your account and the related order

Usage data

• ZIP code searches and browse activity (not linked to your identity unless you are signed in)
• Page views and navigation events collected via analytics (see Section 5)

We use collected information to:

• Create and maintain your account
• Process orders and coordinate pickup logistics
• Facilitate messaging between Buyers and Sellers
• Verify Seller registration documentation
• Detect and prevent fraud, abuse, and policy violations
• Send transactional emails (order confirmations, status updates)
• Improve and operate the Platform

We do not sell your personal information to third parties. We do not use your data for advertising targeting on external platforms.

All payment processing is handled by Stripe, a third-party payment processor. When you check out, your payment card details are entered directly into Stripe’s secure interface and are never transmitted to or stored on our servers.

Sellers who accept payments on the Platform connect a Stripe account through Stripe Connect. Stripe’s use of your information is governed by Stripe’s Privacy Policy.

We store Stripe payment intent IDs, transaction amounts, and payout status in our database to track order and payout state. No raw card data is stored by us.

Your account data, order records, messages, and uploaded files (such as Seller registration documents and profile photos) are stored in a database and file storage system hosted by Supabase, running on AWS infrastructure. Data is stored in the United States.

Access to your data is protected by Row Level Security policies, which ensure that users can only access records they are authorized to see. Service-role access is restricted to server-side operations only.

We use session cookies to maintain your login state. These are set by our authentication provider and are necessary for the Platform to function.

We may use Vercel Analytics or similar privacy-respecting analytics tools to collect aggregate, anonymized page view data (e.g., which pages are visited and from which geographic regions). This data does not include personally identifiable information and is used solely to understand Platform usage.

We do not use advertising cookies or third-party tracking pixels.

We retain your account information and order history for as long as your account is active. If you close your account, we will retain records necessary for legal, financial, and dispute-resolution purposes for up to 7 years, after which they will be deleted or anonymized.

Messages are retained indefinitely unless deleted by an administrator as part of a moderation action. Deleted messages are not recoverable by users.

Uploaded Seller registration documents are retained for the duration of your account and for a reasonable period following account closure.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data (subject to legal retention requirements)
• Withdraw consent to optional data uses

To exercise any of these rights, contact us at hello@localcottagefoods.com. We will respond within 30 days.

If you are a resident of a jurisdiction with specific privacy rights (such as the California Consumer Privacy Act), those rights apply to you. Contact us to make a request.

The Platform is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy periodically. We will notify users of material changes by updating the “Last updated” date at the top of this page. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

Questions or concerns about this Privacy Policy? Contact us at hello@localcottagefoods.com.