Privacy Policy

We collect only the information necessary to operate the Service and comply with applicable laws:

• Account information — name, email address, phone number, organization name, role (donor, driver, hub, seeker), and a securely hashed password.
• Profile information — optional bio, profile photo, address, county, and operating hours.
• Operational data — donation logs (weight, category, temperature, pickup/delivery address, timestamps), driver route assignments, hub intake records, and generated tax or compliance receipts.
• Payment information — when you subscribe, our Merchant of Record (Paddle) collects billing details. We do not store full payment card numbers.
• Technical data — authentication tokens, session cookies, device type, and basic request logs needed to keep the Service secure and available.

We use your information to:

• Route surplus food from donors to drivers and recovery hubs.
• Generate SB 1383 compliance reports and IRC §170(e)(3) tax receipts.
• Provide dashboards, analytics, and account management features.
• Process subscription payments through Paddle.
• Communicate operational updates, security notices, and support responses.
• Enforce access controls and protect against unauthorized activity.

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), row-level database security policies, role-based access controls, and secure authentication. Profile photos and sensitive documents are stored in private storage buckets accessible only to the owning user or authorized platform administrators.

We do not sell, rent, or trade your personal information. We only share data when necessary:

• With recovery hubs and drivers involved in fulfilling a donation you create.
• With Paddle, our Merchant of Record, to process payments, taxes, invoices, refunds, and chargebacks.
• With infrastructure providers that host the Service (database, auth, storage, edge compute).
• When you generate an SB 1383 report or tax receipt that you choose to submit to a regulator or auditor.
• When required by law, subpoena, or to protect the rights and safety of our users.

Compliance-relevant records (donation logs, receipts, tax documentation) are retained for the period required by applicable regulations, typically up to 7 years for tax records. Account data is retained for the life of your account. You may request deletion of your personal data at any time; we will honor your request subject to legal and regulatory retention obligations.

Depending on your location, you may have the right to:

• Access, update, or correct your account information.
• Request a copy of your data in a portable format.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.

California residents have rights under CCPA/CPRA. EU/UK residents have rights under GDPR. Contact us to exercise any of these rights.

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

Your data is primarily stored and processed in the United States. If you access the Service from outside the United States, you consent to the transfer, storage, and processing of your data in the United States or other jurisdictions where our infrastructure providers operate.

We use strictly necessary cookies and local storage to maintain your login session and remember your preferences. We do not use third-party advertising or analytics cookies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify users where required by law. Continued use of the Service after changes means you accept the revised policy.

For privacy questions, data requests, or to exercise your rights, contact:
Joel Benson, Owner — Quality Dimension LLC
Email: privacy@qualitydimensionllc.com