Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide when you create an account, place orders, communicate with us, or otherwise interact with the Platform, including:

Full name, email address, phone number, and delivery address(es);
Account login credentials, stored by our authentication provider using secure password hashing;
Payment method details processed and stored securely by Stripe; the Company does not store full credit card numbers, CVVs, or bank account numbers;
Order history, product preferences, and saved Farmer selections;
Communications you send to us, to Farmers through the Platform, or in response to surveys and promotions;
Profile information, including a profile photograph if you choose to upload one; and
Other information you choose to provide.

1.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain information, including:

Device information: device type, model, operating system and version, unique device identifiers where available, and mobile network information;
Log data: IP address, access dates and times, pages and features viewed, app crashes and diagnostics, and referring URLs;
Crash and performance reports: when the app crashes or performs poorly, our error-monitoring provider, Sentry, automatically collects a diagnostic report that includes a pseudonymous account identifier and your role (Customer or Farmer) — never your name or email address;
Location data: with your permission, precise or approximate geolocation for delivery optimization, nearby Farmer discovery, and location-based features; and
Usage data: features used, interactions with the Platform, search queries, browsing behavior, time spent, clickstream data, and cookies or similar technologies on associated web properties.

1.3 Information from Third Parties

We may receive information about you from:

Stripe, including payment confirmation, transaction status, and limited payment method details;
Sentry, including crash and performance diagnostics as described above;
Expo/EAS Insights, including aggregated, anonymized app-usage analytics;
Google, including address text you type into the app, which is sent to the Google Places API to power address autocomplete;
Social media platforms, if you choose to link a social account; and
Farmers, including order fulfillment information, delivery confirmations, and dispute-related communications.

2. How We Use Your Information

We use the information we collect to:

Facilitate transactions, process orders, and coordinate delivery between Customers and Farmers;
Process payments, issue refunds, and send transaction confirmations and receipts;
Provide, operate, maintain, secure, and improve the Platform;
Communicate with you about orders, your account, and support inquiries;
Send promotional communications, offers, and marketing materials with your consent and subject to your opt-out preferences;
Personalize your experience, including product recommendations and relevant content;
Ensure Platform safety and detect and prevent fraud, abuse, and unauthorized access;
Comply with legal obligations, including tax reporting and lawful requests;
Resolve disputes, enforce agreements, and protect legal rights; and
Conduct analytics, research, and testing to improve services and user experience.

3. How We Share Your Information

4. Data Retention

We retain personal information while your account is active or as needed to provide services. We also retain and use information as necessary to:

Comply with legal, regulatory, and tax obligations;
Resolve disputes and enforce agreements;
Maintain business records for legitimate purposes; and
Fulfill the purpose for which the information was collected.

When information is no longer needed, we will securely delete, anonymize, or de-identify it in accordance with retention schedules and applicable law.

5. Data Security

We implement commercially reasonable technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit and at rest;
Access controls and role-based permissions;
Security assessments, vulnerability testing, and monitoring;
Secure password hashing and authentication protocols; and
Incident-response procedures for potential data breaches.

No method of Internet transmission or electronic storage is one hundred percent (100%) secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.

6. Data Breach Notification

If a data breach compromises personal information, the Company will:

Investigate and take immediate steps to contain and remediate the breach;
Notify affected individuals without unreasonable delay and within any timeframe required by law;
Provide information about the nature of the breach, information affected, and response steps; and
Notify applicable regulatory authorities as required by law.

7. Your Rights and Choices

7.1 Account Information

You may access, update, correct, or request deletion of account information through account settings in the App or by contacting privacy@bellpepper.shop. We may retain information required by law, for legitimate business purposes, or to complete transactions you initiated.

7.2 Marketing Communications

You may opt out of promotional emails using the unsubscribe instructions in those emails. You may adjust push-notification preferences in device settings or the App. We may still send non-promotional service communications, including order confirmations, delivery updates, and account-security alerts.

7.3 Location Data

You may enable or disable precise location through device settings. Disabling location services may limit nearby-Farmer discovery and delivery-route features.

7.4 Do Not Track Signals

The Platform does not currently respond to browser "Do Not Track" signals. We will update this Policy if that practice changes.

7.5 Data Portability

Upon written request, we will provide a copy of personal data in a commonly used, machine-readable format to the extent required by law.

8. State-Specific Privacy Rights

8.1 California Residents (CCPA/CPRA)

California residents may have rights under the California Consumer Privacy Act and California Privacy Rights Act, including:

Right to Know: request categories and specific pieces of personal information, sources, business purposes, and sharing categories;
Right to Delete: request deletion subject to applicable exceptions;
Right to Correct: request correction of inaccurate information;
Right to Opt Out: we do not sell or share personal information for cross-context behavioral advertising;
Right to Non-Discrimination: we will not discriminate for exercising privacy rights; and
Right to Limit: where applicable, limit use of sensitive personal information to necessary service purposes.

Contact privacy@bellpepper.shop or use privacy settings in the App. We will verify identity before processing a request.

8.2 Other State Privacy Laws

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others, may have rights to access, correct, delete, and port personal data and opt out of targeted advertising or profiling. Contact privacy@bellpepper.shop to exercise rights under applicable law.

9. Children’s Privacy

The Platform is not directed to, and we do not knowingly collect personal information from, children under thirteen (13), or sixteen (16) where required by state law. If we learn that we collected information from a child under the applicable age, we will promptly delete it. Contact privacy@bellpepper.shop if you believe a child provided information.

10. Third-Party Links and Services

The Platform may contain links to or integrations with third-party websites, services, or applications that the Company does not operate or control. This Privacy Policy does not apply to those services. Review their privacy policies. The Company is not responsible for third-party privacy practices, content, or security.

11. International Data Transfers

The Platform is operated in the United States. If you access it from outside the United States, your information may be transferred to, stored, and processed in the United States, where data-protection laws may differ. By using the Platform, you consent to those transfers.

12. Changes to This Privacy Policy

We may update this Policy to reflect changes in practices, technology, legal requirements, or other factors. For material changes, we will provide notice through the Platform, by email, or by another appropriate means before changes become effective. The revised Policy will show its last-updated date. Continued use after the effective date constitutes acceptance.

13. Contact Us

Questions, concerns, or requests about this Privacy Policy or our data practices may be sent to:

Bell Pepper Market
State of Michigan
Privacy inquiries: privacy@bellpepper.shop
General support: support@bellpepper.shop