Privacy Policy

Information we collect

• Account data — email, organization name, role, phone, address, bio, and optional profile photo.
• Operational data — donation logs (weight, category, temperature, pickup address, timestamps), driver route data, hub intake records, and generated receipts.
• Technical data — authentication tokens, session cookies, and basic request logs required to run the Service.

How we use it

• Routing surplus food from donors to drivers and recovery hubs.
• Generating SB 1383 compliance reports and IRC §170(e)(3) tax receipts.
• Providing dashboards, analytics, and account management.
• Communicating operational updates and security notices.

Access controls

Access is enforced by row-level security in our database. Users can only read and modify data they own, or data explicitly shared with their role (e.g. a hub can see inbound donations addressed to it). Administrative access is limited to authorized personnel.

Sharing

We share data with:

• Recovery hubs and drivers involved in fulfilling a donation you create.
• Paddle — our online reseller and Merchant of Record for all subscription orders. When you subscribe, Paddle receives the personal and payment data required to process the transaction, calculate taxes, issue invoices, handle refunds and chargebacks, and provide customer support (typically your name, email, billing address, IP address, and payment instrument details). Paddle processes this data under its own privacy policy at paddle.com/legal/privacy.
• Infrastructure providers that host the Service (database, auth, storage, edge compute).
• Regulators or auditors when you generate an SB 1383 report or tax receipt you submit.
• Law enforcement when legally required.

We do not sell personal data.

Retention

Compliance-relevant records (donation logs, receipts) are retained for the period required by applicable regulations (typically up to 7 years for tax records). Account data is retained for the life of your account; you may request deletion subject to those regulatory holds.

Your rights

You may request access, correction, export, or deletion of your personal data. California residents have additional rights under CCPA/CPRA; EU/UK residents have rights under GDPR. Contact us to exercise these rights.

Cookies

We use strictly-necessary cookies and local storage to maintain your login session. We do not use third-party advertising cookies.

Contact

Privacy questions or requests: Joel Benson, Owner — Quality Dimension LLC · privacy@qualitydimensionllc.com.