Privacy Policy

1. Scope, Florida notice, and information we collect

This Privacy Policy describes how Food Truck Spot LLC ("Company", "we", "us") collects, uses, discloses, retains, and protects personal information through the Platform. It applies to B2B Customers, their organization users, B2C Customers, truck operators, venue hosts, visitors, and people who communicate with us. Our mailing address is 946 E Michigan St Apt B, Orlando, FL 32806, and our privacy contact email is privacy@foodtruckspot.com.

Depending on how you use the Platform, we may collect identity and contact information; login, authentication, organization, role, verification, licensing, insurance, and business information; truck, venue, menu, schedule, booking, order, catering, payment-status, review, message, dispute, and support information; approximate or precise location you choose to share; device, browser, IP, diagnostic, security, and push-subscription information; and information you submit in photos, documents, forms, or communications.

We may receive information from Stripe, Inc. and other payment processors, authentication providers, mapping or geocoding providers, fraud and security services, public sources, referrals, and other users. We do not intend to collect or store raw payment-card numbers or sensitive financial-authentication tokens on internal servers; Stripe handles payment details subject to Stripe's terms and privacy policy.

2. How we use information

We use information to provide, personalize, maintain, and secure the Platform; create and manage accounts and organization permissions; show trucks, venues, menus, schedules, and availability; facilitate bookings, catering, orders, payments, refunds, payouts, reviews, disputes, and notifications; verify information and prevent fraud, abuse, and unsafe activity; provide support; analyze performance and improve products; comply with law and enforce agreements; and send service messages. Marketing communications are handled according to applicable law and your choices.

We may create aggregated, de-identified, or statistical information that cannot reasonably identify you and may use it for operations, analytics, safety, and product development. We will not treat de-identified information as personal information except as required by law.

3. Location, cookies, and notifications

Location sharing is optional. If you grant permission, we may use the location available to the browser or device to sort nearby results, calculate distance, support directions, or confirm an eligible visit. We do not need continuous background location for ordinary Discover use. You can search by city or address, disable permission in your device or browser, and manage visit-related features in your account.

The Platform uses necessary storage for sessions, preferences, security, and core functionality. Optional analytics or advertising technologies are loaded only where configured and, where required, after consent. See the Cookie Policy for categories, choices, and the current list of providers. Push notifications require browser or device permission and can be disabled in account or device settings.

4. Stripe, service providers, and how we share information

We share information as needed to operate a transaction: relevant business and contact details with the truck, venue, or customer involved; content you choose to publish on a public profile; and information needed for payment, fulfillment, support, check-in, reviews, or dispute handling. Stripe, Inc. processes subscription and marketplace payments under its applicable Consumer Services Agreement, Connected Account Agreement, and privacy terms. We do not sell personal information for money. Where Florida or another applicable privacy law treats targeted advertising or data sharing as a regulated sale or sharing, we will provide the required notice and opt-out mechanism.

We may share information with service providers that host, secure, analyze, communicate through, geocode, authenticate, moderate, or process payments for the Platform; with professional advisers, insurers, auditors, and corporate affiliates; in connection with a merger, financing, acquisition, reorganization, or asset transfer; and when necessary to comply with law, respond to legal process, protect rights and safety, investigate abuse, or enforce agreements. We require appropriate contractual and security controls from providers where required.

5. Retention, security, regulated data, and transfers

We retain information for as long as reasonably necessary for the purposes described here, including account operation, completed transaction records, tax and accounting, fraud prevention, disputes, safety, legal claims, backups, and legal obligations. For B2B customer data processed on the customer's behalf, the applicable Data Processing Addendum controls retention and deletion. Unless law or the DPA requires longer, customer data is targeted for deletion or return within 60 days after termination, subject to backups, dispute records, legal retention, and de-identification.

We use administrative, technical, and physical safeguards appropriate to the risk, but no system or transmission is perfectly secure. Do not submit secrets or unnecessary sensitive information through a profile, message, review, or support form. If we learn of a legally reportable incident, we will provide notices required by applicable law.

The Platform is not represented as a HIPAA-covered service or a PCI-DSS card-storage environment. Do not submit Protected Health Information or full payment-card data unless a written agreement expressly authorizes it. Service providers or the Company may process information in countries other than where you live. Where required, we will use an applicable transfer mechanism and supplemental safeguards.

6. Florida and other privacy rights

Depending on where you live and whether a statutory threshold applies, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information; withdraw consent; opt out of certain marketing, targeted advertising, sale, or sharing; and appeal a decision about a rights request. Florida residents may have additional rights under the Florida Digital Bill of Rights and other Florida law. We will honor all rights that apply to the request and provide required methods, timelines, verification, authorized-agent procedures, appeals, and regulator information.

Submit a privacy request to the contact identified below. We may verify identity and authority before responding. We will not discriminate against you for exercising a legal right. A B2B organization may control requests concerning business users' data where it is the responsible controller or business, while Foodtruck Spot will assist as required by the applicable DPA and law.

7. Children, third parties, and changes

The Platform is not directed to children below the minimum age required by applicable law, and we do not knowingly collect personal information from a child in violation of that law. If you believe a child provided information improperly, contact the privacy address so we can investigate and take appropriate action.

The Platform may link to third-party sites, maps, payment providers, social networks, or services. Their privacy practices and terms control their services, not ours. We may update this policy as the Platform or law changes, post the updated version with a new effective date, and provide additional notice or consent where required.

8. Contact and Florida operator details

To submit privacy requests or questions, contact Food Truck Spot LLC, 946 E Michigan St Apt B, Orlando, FL 32806, or email privacy@foodtruckspot.com. You may also use our online Privacy Request Form under Account Settings or at /privacy/request.