PRIVACY POLICY

Version: draft-v2 · Effective Date: not yet effective

This Privacy Policy describes how PlatedUp LLC collects, uses, and shares information across the PlatedUp App and the public Website (plated-up.com).

By using the App or visiting the Website, you acknowledge that you have read this Privacy Policy.

1.Information We Collect

PRODUCT DECISION NOTE: This Policy is intended to cover the PlatedUp product as a whole (Website and App). This drafting pass had access only to the public marketing website and its own minimal contact-form/waitlist backend — not the PlatedUp mobile app, its production backend/API, or internal Ops/admin systems. Categories below describing App-only functionality (precise/live location, live order tracking, push notifications, App-side analytics, Cook payout and screening data, agreement-acceptance records) are described based on current product-policy documentation (the Help Center), not verified against live App/backend source code. The team that owns the App/backend must confirm actual current practice for each such category — including whether any category believed absent is in fact already live — before this Policy is treated as final and accurate for the App.

1.1Customer. Name, account/contact information; booking information (service address, scheduling, order history); chat and support communications; reviews, ratings, and photos submitted; approximate or precise location where permitted, at minimum for service-area matching (e.g., confirming a Cook covers your area); payment-method metadata (card brand, last four digits, expiration — full card data is held by Stripe, not PlatedUp).

PRODUCT DECISION NOTE: Whether the App collects location beyond coarse service-area matching — for example, precise GPS location, a live Cook-tracking map, or background location collected when the App is not open — cannot be confirmed from this repository; no such functionality exists in the current Help Center product documentation or in this website's own code, but that is not proof of absence in the App. If the App has, or will have, live tracking or background location, the App/backend team must specify exactly what is collected, when, why, and with whom it is shared, and this clause must be rewritten to describe it precisely rather than left general. Do not represent live or background location tracking as currently active based on this Policy alone.

1.2Cook. Application/profile information; identity information, and date of birth where actually collected for age/identity verification (not represented as collected on this Website — App-only, and only if the onboarding flow actually requests it); identity-verification and background-check status/identifiers (via Checkr); Food Safety Certificate documents; payout status and Stripe Connect account identifiers (full bank account and routing details are held by Stripe, not PlatedUp); tax-reporting data where applicable (e.g., Form 1099 information); account-review and reliability records.

1.3Platform (both roles). Device information, IP address, browser/app information, and log information; cookies and analytics technologies (Google Analytics 4 and PostHog, both confirmed in current use on the Website); SMS records, for users who opt in; push-notification delivery records, where the App sends push notifications; security/fraud signals; support-ticket records.

PRODUCT DECISION NOTE: Google Analytics 4 and PostHog are confirmed in this Website's own source code. Whether the App uses push notifications, and if so what analytics tooling the App itself uses (the same providers or different ones), cannot be confirmed from this repository — the App is not present here. Do not represent App-side push notifications or App-side analytics as confirmed until the App/backend team verifies them.

1.4Agreement / Consent Records. PlatedUp intends to maintain records showing which agreement or disclosure a user accepted or acknowledged, the document version and effective date, the acceptance date/time, the relevant account identifier, the acceptance method/source, and — where collected for security, compliance, or evidentiary purposes — related technical information such as IP address or device/browser metadata.

PRODUCT DECISION NOTE: This is a new category reflecting an intended future state, not necessarily current implementation. This Website does not currently collect IP address or device metadata for acceptance-record purposes; that capability is intended for the App and is not yet implemented.

1.5Dietary, Allergy, Accessibility, and Other Health-Related Information. If you choose to share dietary restrictions, food allergies, accessibility needs, or similar health-related information in connection with a booking — for example, through in-app messaging with your Cook — PlatedUp may collect and store that information. It is provided voluntarily by you, is used to help your Cook take your stated preferences and restrictions into account for that booking, and may be shared with the assigned Cook where necessary to perform the booking. PlatedUp does not sell this information.

ATTORNEY REVIEW NOTE: Confirm whether this category is “sensitive personal information” under Texas's or another applicable state's privacy law and, if so, whether opt-in consent (rather than the general acknowledgment model used for this Privacy Policy) is required before collection; confirm the appropriate security and retention approach for this category specifically, and how it interacts with precise-geolocation data if both are collected about the same booking.

2.How We Use Information

To operate the Platform; facilitate bookings and Cook matching; process payments and Cook payouts; support grocery pickup; enable Customer/Cook and support communications; maintain safety, fraud-prevention, and account-security processes; support Cook background screening; analyze and improve the Website/App; comply with legal obligations and enforce these policies; handle disputes; and, where implemented, record acceptance of legal agreements as described in Section 1.4.

3.How We Disclose Information

We may disclose information as follows:

(a)Customer ↔ Cook — as needed to perform a booking (e.g., service address shared with the assigned Cook; Cook profile shared with the Customer).
(b)Stripe — payment processing and Cook payouts.
(c)Checkr — identity verification and background screening.
(d)SMS / communications providers — to deliver opted-in transactional messages.
(e)Email providers — transactional and support email.
(f)Map/location providers — service-area and address functionality, where used.
(g)Cloud hosting — infrastructure for the App and Website.
(h)Analytics providers — Google Analytics 4, PostHog.
(i)Customer support infrastructure — to respond to inquiries.
(j)Professional advisers — counsel, auditors, insurers, as needed.
(k)Law enforcement / legal process — where required by law or to protect rights, safety, or property.
(l)Business transfers — in connection with a merger, acquisition, or sale of assets.

PlatedUp does not sell personal data. No vendor beyond those actually integrated (Stripe, Checkr, Google Analytics 4, PostHog, standard cloud/email/SMS infrastructure) is listed here.

4.Cookies and Tracking

The Website uses Google Analytics 4 (Google Consent Mode v2 — analytics storage denied by default until opted in) and PostHog for product analytics; advertising-related consent is currently kept disabled. Users control cookie preferences via the in-page consent banner and footer “Cookie Settings” control.

5.Privacy Rights

Subject to applicable law and jurisdiction: access, correction, deletion, portability/download, and withdrawal of consent where processing is consent-based.

ATTORNEY REVIEW NOTE: Opt-out rights for targeted advertising and any future “sale”/“share” of data (not currently applicable — no ad-targeting or data sale occurs, but should be revisited if that changes); whether any collected category (e.g., precise location, background-check results) qualifies as “sensitive” under a specific state law and requires opt-in rather than opt-out treatment; and any required appeal process for a denied privacy request.

6.Data Retention

PlatedUp retains information for as long as reasonably necessary for the purposes described in this policy and to meet legal, accounting, security, and dispute-resolution obligations.

ATTORNEY REVIEW NOTE: No specific retention periods are currently published beyond this general standard. Counsel should set defined periods or criteria for: user accounts; booking/payment transaction records; tax/accounting records; support and chat records; reviews; safety and damage reports; background-check metadata; Food Safety Certificate documents; payout records; fraud/security logs; and, once implemented, agreement-acceptance and consent records. No specific figure is proposed here to avoid inventing one not yet confirmed by PlatedUp's actual practices.

7.Data Security

PlatedUp uses reasonable administrative, technical, and organizational safeguards; no method of transmission or storage is completely secure, and absolute security is not guaranteed.

8.Children's Privacy

The App and Website are not intended for users under 18, consistent with the Terms' age-eligibility provision; PlatedUp does not knowingly collect information from children under 18.

9.Changes to This Policy

PlatedUp will post the current version and its effective date, with prior versions archived.

ATTORNEY REVIEW NOTE: Whether material changes that expand data use should require affirmative re-acknowledgment, rather than the continued-use acceptance model this Policy currently describes, remains open for counsel to determine.

10.Acknowledgment, Not Agreement

Consistent with the proposed clickwrap architecture, this Privacy Policy is presented for acknowledgment rather than “I agree” contractual language, unless counsel advises a specific reason to require agreement-style acceptance.

11.Third-Party Services

Stripe (payments/payouts), Checkr (screening), grocery retailers/delivery providers (selected and paid by the Customer directly — PlatedUp does not process grocery-purchase payments), and standard cloud/analytics vendors. These providers apply their own privacy practices; PlatedUp is not responsible for their independent processing.

← Back to Home

PlatedUp LLC — Support@plated-up.com