How Survdd handles information.

This Privacy Policy explains how Survdd collects, uses, discloses, and protects information when you use the Platform.

1. Information you provide

We may collect account information such as name, email, phone number, password hash, account role, and account status; order information such as contact details, delivery address, notes, items, totals, and fulfillment choice; vendor information such as business name, service area, menu data, schedules, pickup information, permit details, and compliance documents; and content such as reviews and support requests.

2. Payment information

Card and payment credentials are collected and processed by our payment provider, such as Stripe. Survdd may receive payment status, transaction/session identifiers, payment-intent identifiers, connected-account identifiers, onboarding status, payout readiness, and other information needed to reconcile orders and fees. Stripe collects connected vendors’ financial-account and identity-verification information directly where its hosted onboarding is used; Survdd does not need to store complete bank-account or card numbers. The Survdd application is not designed to store complete payment-card numbers.

3. Location information

If you choose “Use my location,” your browser may provide latitude and longitude so Survdd can rank live food trucks by approximate distance. The current implementation uses those coordinates for the request and does not require a permanent customer location profile. Food-truck vendors may voluntarily publish a current service location and coordinates; the live status expires automatically after the selected period.

4. Home pickup privacy

Home-based vendor pickup addresses are treated as sensitive operational information. Survdd does not intentionally display the exact home pickup address on the public vendor page. For a pickup order, the address is made available to an authenticated customer after the order is paid. Vendors should avoid placing a private home address in public-facing descriptions, logos, photos, or other free-text fields.

5. Compliance documents

Vendor compliance documents are stored in a private server directory and served only through an authenticated administrator route. We use those documents for vendor verification, safety and fraud review, and recordkeeping. Vendors should submit only documentation requested for the review process and should avoid unnecessary sensitive information when a redacted document is legally sufficient.

6. Technical information

We may process IP address, browser/request information, timestamps, session cookies, security tokens, audit events, and diagnostic information to secure accounts, prevent fraud, operate the application, investigate errors, and maintain records. Session cookies are used for authentication, carts, CSRF protection, and related application state.

Device notifications and community content

If you enable device alerts, Survdd stores your browser push subscription and encryption keys and sends alerts through your browser or device provider. These providers process delivery information. Notifications may show a message preview on your lock screen. You can disable device alerts, choose alert categories for followed vendors, or remove event reminders. Logging out stops alerts for that account on the current registered browser; other signed-in devices remain registered.

Vendor posts, photos and published community events are public. Keep private home addresses out of posts and event submissions. Truck map pins show deliberately shared service locations only. Map tiles are provided by OpenStreetMap by default; the map provider receives requests for the map area you view, along with normal network information. Directions links open an external mapping provider.

7. How information is used

We use information to provide accounts and ordering; verify vendors; process and reconcile transactions; show menus, schedules, and live locations; send in-app notifications; provide support; detect fraud or misuse; enforce policies; improve the Platform; and comply with legal obligations.

8. How information is shared

Information may be shared with the vendor or customer as needed to fulfill an order; with service providers that host, secure, communicate for, or process payments for Survdd; with professional advisers; in a business transfer; or with authorities when required by law or reasonably necessary to protect safety, rights, or the integrity of the Platform. Survdd does not make vendor compliance documents public.

9. Retention

We retain information for as long as reasonably necessary for the purposes described here, including transaction records, fraud prevention, dispute handling, tax/accounting obligations, vendor compliance history, and legal requirements. A deleted account may be deactivated and de-identified in active lists while transaction or audit records are retained where needed.

10. Security

Survdd uses measures such as password hashing, secure session settings, CSRF protection, restricted private-document storage, authenticated role checks, audit logging, and HTTPS-oriented security headers. No internet service can guarantee absolute security.

11. Your choices

You may decline browser geolocation and still browse Survdd. You may unfollow vendors, manage information in your account where tools are available, or contact Survdd about an access, correction, or deletion request. Some records may be retained when required for transactions, security, disputes, or legal obligations.

12. Children

Survdd accounts are intended for people age 18 or older. The Platform is not intended to knowingly collect account information from children.

13. Changes and contact

We may update this Policy as Survdd changes. Questions or privacy requests may be sent to legal@survdd.com.