Privacy Policy

1. Who this policy covers

This policy covers shoppers with EVR Foodie accounts, guests placing walk-up kiosk orders, shop owners and team members, market operators and their team members, and visitors to our public pages. A shop is separately responsible for information it collects or uses outside EVR Foodie.

2. Information we collect

Information you provide

• Account information: name, email address, encrypted account credentials, role, business name, and account preferences.
• Shop, market, and growing information: listings, menus, products, prices, accepted payment methods, venues, stops, event schedules, crop and plot details, growing preferences, descriptions, photos, and public contact details.
• Order information: items, modifiers, totals, pickup or delivery details, order notes, status, and customer contact details supplied for the order.
• Payment information: payment method choice, transaction status, and identifiers supplied by Stripe or another payment service. EVR Foodie does not receive full card numbers from Stripe Checkout.
• Communications: information in support requests, feedback, and messages you send us.

Information collected through use

• Device and security data: IP address, browser and device information, timestamps, session records, and diagnostic or security logs.
• Location and discovery data: the city, region, map area, or location search you choose, plus business-provided coordinates for shops, venues, and scheduled stops. A shop owner may separately choose to share a growing site's device location or enter coordinates to create a crop plan, and may attach a private site photo for that plan. We request device location only after the owner selects the location control, store the consent time, and do not publish growing-site coordinates or site photos or continuously track a device.
• Usage and campaign data: pages and features used, saved shops, referrer host, campaign tags in links (such as UTM source, medium, and campaign), and interactions needed to operate and improve the service. A signed first-party identifier and campaign cookie let us understand whether a visit leads to an account, checkout, or order. We do not store the raw identifier, honor Global Privacy Control for this measurement, and delete request-level analytics after 90 days.

3. How we use information

We use personal information to:

• provide nationwide discovery, accounts, public listings, schedules, order-ahead, kiosk ordering, crop calendars, an optional planning tool, and business tools;
• authenticate users, maintain sessions, prevent abuse, protect accounts, and troubleshoot the service;
• route and manage orders, payments, refunds, subscription billing, connected-account onboarding, delivery, and receipts;
• send transactional and service communications and respond to support requests;
• enforce our Terms of Use, comply with law, and protect users, EVR Foodie, and the public; and
• analyze and improve reliability, accessibility, product design, and business operations.

4. When we disclose information

• Shops and shoppers: we give the fulfilling shop the customer and order details needed to prepare, deliver, support, or refund an order. Shoppers receive the shop and order details needed to complete their purchase.
• Public listings: shop, market, venue, stop, and event information designated for publication is visible to the public and may appear on maps or in search results.
• Market relationships: when a shop links a stop to a market event, the shop, market, event, and participation details may be visible together. EVR Foodie does not currently require market approval for that link.
• Service providers: we use providers for hosting, email, security, analytics needed to operate the service, payment processing, and other infrastructure. When a shop owner requests a crop plan, rounded growing-site coordinates and planning dates may be sent to our configured climate-data provider to derive local context. Plot details, preferences, catalog context, those derived facts, and an optional resized and metadata-stripped site photo are sent to our planning service provider, currently Amazon Bedrock, to prepare that plan. They may process information only for the services they provide to us.
• Stripe: Stripe processes platform subscriptions, card payments, connected-account verification, payouts, disputes, and refunds under its own privacy terms.
• Delivery providers: if a shop and customer request integrated delivery, we may send contact, pickup, drop-off, and order details to DoorDash or another selected provider.
• Legal and safety: we may disclose information when reasonably necessary to comply with law, respond to lawful process, investigate fraud or security incidents, or protect rights and safety.
• Business changes: information may be transferred as part of a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money or share personal information for cross-context behavioral advertising. EVR Foodie does not currently use third-party advertising cookies.

5. Your choices and rights

You can update much of your account and public listing information in EVR Foodie. You may ask us to access, correct, export, or delete personal information associated with your account. Applicable law may provide additional rights, and we may need to verify your identity before completing a request. Some information may be retained where necessary for transactions, fraud prevention, legal compliance, or disputes.

To make a privacy request, email evermed@evermedresearch.org with "EVR Foodie privacy request" in the subject line.

6. Retention and security

We retain information for as long as reasonably necessary to provide the service, maintain transaction and tax records, meet legal obligations, resolve disputes, and protect the service. Retention periods vary by the type of information and why it was collected. We use administrative, technical, and organizational safeguards designed to protect information, but no system can guarantee absolute security.

7. Children's privacy

EVR Foodie is not directed to children under 13, and we do not knowingly collect personal information from them. Business and market accounts must be created and managed by adults. If you believe a child provided personal information, contact us so we can investigate and take appropriate action.

8. United States operation

EVR Foodie currently operates for United States businesses and customers. Information may be processed and stored in the United States. If we later support additional countries, we will update our practices and notices as appropriate before launch.

9. Changes and contact

We may update this policy as the service changes. We will post the revised version and effective date here and provide additional notice when required. Questions can be sent to evermed@evermedresearch.org.