1. Scope
This Privacy Policy explains how DeliDood handles information about customers, business owners, staff, and people who interact with community features. It applies to the DeliDood website, account tools, order and reservation flows, and real-time notifications.
2. Information we collect
- Account information such as name, email address, password hash, profile image, description, role, and business membership details. We may also process a contact phone number when you provide one for a delivery or reservation.
- Business information such as menus, prices, discounts, taxes, staff assignments, opening hours, tables, rooms, inventory, expenses, and reports.
- Transaction information such as ordered items, amounts, delivery location, reservation details, payment references, and status history.
- Community information such as posts, images, comments, replies, votes, follows, reviews, reports, appeals, and moderation actions.
- Security and technical information such as sessions, device and browser details, IP address, timestamps, cookies, and security events.
3. How we use information
- Authenticate accounts, maintain sessions, and prevent unauthorized access.
- Place and track orders, calculate totals and discounts, manage reservations, and notify the relevant people.
- Operate business tools, reporting, staff permissions, billing, inventory, and membership features.
- Display community content and provide replies, votes, follows, reports, and moderation appeals.
- Detect abuse, investigate security incidents, enforce policies, troubleshoot failures, and improve performance.
- Meet accounting, fraud-prevention, consumer-protection, and other legal obligations.
6. Retention
We keep information while an account is active and for as long as needed to provide the requested service. Expired sessions and temporary payment attempts are removed on their configured schedules.
When an account is deleted, active account data, sessions, media, posts, comments, reservations, and direct associations are removed. Limited append-only moderation audit records and completed financial or transaction evidence may be retained when required for security, dispute resolution, accounting, fraud prevention, or law. Retained records are not used to recreate the deleted account.
7. Your choices and rights
- Update your profile and notification preferences from your account controls.
- Review active sessions and sign out devices you do not recognize.
- Delete your account permanently from Settings after confirming your password.
- Ask for access, correction, or a portable copy of applicable personal information through DeliDood support.
- Appeal eligible moderation decisions through the appeals page.
8. Security
DeliDood uses password hashing, scoped authorization, session revocation, request-forgery protection, input validation, rate limits, and security headers. No online service can guarantee absolute security, so report suspicious activity promptly and use a unique password.
9. Children
DeliDood is not intended for children who cannot legally consent to an online account in their location. A parent or guardian should contact support if they believe a child provided personal information without appropriate permission.
10. Changes and contact
We may update this policy as the service changes. Material updates will be communicated through DeliDood when practical.
Privacy questions and rights requests can be sent through the support contact provided inside DeliDood.