Privacy Policy

Information you provide directly:

• Account registration — name, email address, and password (managed via Clerk authentication);
• Business profile — business name, address, phone number, business type, logo, banner images, and menu content;
• Orders — customer name, email, delivery address, and order details submitted through the ordering forms;
• Driver profiles — name, email, phone number, and real-time location data (when drivers use the delivery tracking feature);
• Uploaded media — logos, banner images, menu photos, and gallery photos stored in our cloud file storage.

Information collected automatically:

• IP address, browser type, and device information when you access the Service;
• Usage data such as pages visited and features used, collected through standard web server logs;
• Cookies and similar technologies (see Section 7).

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process and display orders on merchant dashboards;
• Send transactional emails — order confirmations to customers, new-order alerts to merchants;
• Enable real-time delivery tracking between drivers and merchants;
• Authenticate users and maintain account security;
• Respond to support requests and customer inquiries;
• Detect and prevent fraud, abuse, or violations of our Terms of Service;
• Improve and develop the Service.

We do not sell your personal information to third parties. We do not use your information for advertising or behavioral tracking purposes.

We share information only as necessary to operate the Service, with the following service providers:

• Clerk (clerk.com) — user authentication and account management. Clerk handles sign-up, sign-in, and session management. See clerk.com/privacy.
• Cloudflare — hosting, content delivery (CDN), and database storage via Cloudflare Workers and D1. See cloudflare.com/privacypolicy.
• Resend (resend.com) — transactional email delivery (order confirmations and alerts). See resend.com/privacy.
• Stripe (stripe.com) — payment processing (when card payments are enabled). Dispatchy does not store card numbers; all payment data is handled directly by Stripe. See stripe.com/privacy.

We may also disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Dispatchy, our users, or the public.

When a customer places an order through a merchant's Dispatchy-powered ordering page, their name, email, and delivery address are collected and stored on behalf of that merchant. Merchants are responsible for how they use and handle their customers' data and must comply with all applicable privacy laws in their jurisdiction.

Dispatchy acts as a data processor with respect to customer order data — the merchant is the data controller.

Drivers who use the Dispatchy driver application share their real-time GPS location while on active deliveries. This location data is:

• Visible to the merchant whose order is being delivered;
• Potentially visible to the customer via the order tracking page;
• Not stored long-term — location is updated in real time and not retained as a location history.

We retain account and business data for as long as your account is active. Order records are retained indefinitely to support business operations and dispute resolution, unless you request deletion. Uploaded media files are retained until removed by the merchant or until account deletion.

To request deletion of your account and associated data, contact us at contact@orderdispatchy.com. We will process deletion requests within 30 days, subject to any legal obligations to retain records.

The Service uses cookies and similar session storage technologies to maintain authentication sessions (managed by Clerk) and to remember preferences. We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings; however, doing so may prevent you from signing in or using certain features.

We implement industry-standard security measures including HTTPS encryption for all data in transit, secure database storage via Cloudflare D1, and authentication managed by Clerk with support for multi-factor authentication. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale of your personal information (we do not sell personal information); and (d) non-discrimination for exercising your rights.

To exercise these rights, contact us using the information in Section 12.

We may update this Privacy Policy from time to time. When we make material changes, we will revise the effective date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

For privacy-related questions, data deletion requests, or concerns about how your information is handled, please contact us:

For copyright / DMCA inquiries, see the DMCA section of our Terms of Service.