Privacy Policy

What we collect

• Waitlist: the email address you submit so we can tell you when the café opens.
• Ordering: the name and contact (email or phone) you put on a lunch box, and the items you order.
• Coordinators: the company name, organizer name, delivery address, and the roster of invited emails and names you add to a drop.
• Payments: card details are entered into and handled by Square. We never see or store full card numbers, only a card token and the last four digits for reference.

How we use it

To open and run order windows, label and deliver boxes, charge the correct card, send you order and delivery updates, and notify waitlist members when the café opens. That is all.

What stays on your device

Your name, contact, and last order are remembered in your browser (local storage) only, to prefill your next order and offer "the usual." This never leaves your device and is not a company-wide directory. Clear your browser storage to remove it.

Sharing

We share data only with the vendors that make the service work: Square (payments), our email provider (order and waitlist messages), and the kitchen system that fulfills orders. Each receives only what it needs. A drop's roster is visible only to the coordinator who holds that drop's private link.

Retention

We keep order and drop records while the program is active and as needed for accounting. Waitlist emails are kept until the café opens or you ask to be removed. You can request deletion of your information at any time.

Your choices

To access or delete your information, or to leave the waitlist, email hello@embe.bastionforge.com.