Trust
Privacy policy
What we collect, why we collect it, and how guest order access is protected.
Data minimization
Guest access uses a masked email and public order reference. Tokens, card data, raw webhook bodies, and provider secrets are not shown in pages or analytics.
Purpose
Data is used for payment, delivery, order recovery, support, fraud prevention, and legally required records.
Retention
Operational logs and support/order evidence follow a documented retention schedule. Expired credentials are removed by maintenance jobs.