Privacy Policy

Account: your email address, and if you sign in with Google, the name and profile picture Google shares with us. We do not receive your Google password.

Orders: the phone number, pickup or delivery address and notes you enter when ordering, and the order history itself. Shop owners see the contact details of their own customers so they can hand over the goods.

Payments: card payments are handled by Stripe. Stripe receives your card details; we receive only a token, the card brand and last four digits, and the payment result. Shop owners who accept Zelle or Venmo list their own handles, which you see only after placing an order.

Shop owners: the business details you give Stripe during onboarding are held by Stripe. We store your shop name, pickup address, service area, and the status flags Stripe reports back (whether charges and payouts are enabled, and what documents are still due).

Transfer proofs: if you pay a shop owner by Zelle or Venmo and upload a screenshot, we store that image and an automated reading of it (amount, date, sender) to help the shop owner match the payment.

Technical: server logs with IP address, browser type and the pages requested, kept for security and debugging.

We set a session cookie so you stay signed in, and a language cookie (eg_locale) so the site remembers whether you read it in English or Chinese. We do not use advertising or cross-site tracking cookies.

To run the market: show you shops, take and fulfil orders, charge the right amount after weighing, send the emails and text messages an order needs (order confirmations, sign-in links, pickup notices), pay shop owners, and handle refunds.

To keep it honest: detect fraud, reused transfer screenshots, duplicate accounts and abuse.

We do not sell your personal information and do not use it for third-party advertising.

Shop owners see the contact details and order contents of their own customers. Stripe processes payments and shop-owner onboarding under its own privacy policy. Amazon Web Services hosts the site, database, images and email sending. Google provides sign-in if you choose it. Where AI is used to read a transfer screenshot, the image is processed by a model hosted in our AWS account and is not used to train it.

We disclose information when the law requires it, or to protect the safety of users and the platform.

You can view and change your language and contact details in the site. You can stop text messages by replying STOP.

California residents have the right to know what personal information we hold about you, to receive a copy, to have it deleted, and to not be discriminated against for exercising these rights. Self-service export and account deletion are not yet built into the site. To exercise any of these rights, email privacy@everygrocer.com from the address on your account; we will verify it is you and respond within 45 days. We keep records of completed orders as long as tax and payment rules require even after an account is deleted.

Residents of other places with similar rights may use the same address.

We keep account data while your account is open and order records for as long as accounting and tax law requires. Data is stored in the United States. We use encrypted connections and limit access to the people who need it, but no system is perfectly secure.

The site is not directed at children under 13 and we do not knowingly collect their information.

We may update this policy; the date at the top tells you when. Questions go to privacy@everygrocer.com.