Privacy Policy

Emmer ("we", "us", or "our") operates the Emmer platform, which helps food sellers run drops, subscriptions, and orders. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

We collect information you provide directly to us, including your name, email address, phone number, mailing address, and payment information. Sellers also provide business details and the photos they upload for their storefront and products. We also collect information about your use of the service, such as the drops you create or purchase from, your order history, and device information such as IP address and browser type.

The Emmer seller app additionally collects crash and diagnostic data, and product analytics describing how the app is used. Those are described under Analytics and Diagnostics below. The app asks for access to your photo library when you add a product picture, and for permission to send notifications; both are used only for those purposes, and you can decline either without losing the rest of the app.

How We Use Information

We use your information to provide and improve the service, process payments, send order and account notifications, prevent fraud, and comply with legal obligations. We do not sell your personal information.

Third-Party Services

We rely on the providers below to operate the service. Each processes information on our behalf, receives only what its job requires, and is subject to its own privacy policy.

• Stripe — payments and payouts. Card details go directly to Stripe and never reach our servers. Sellers who take payment complete Stripe’s own identity verification with Stripe.
• Clerk — seller accounts and sign-in, including the name and email address on the account and the devices signed in to it.
• Twilio — text messages. Receives the recipient phone number, the message, and delivery results including carrier error codes.
• Resend — transactional email such as order confirmations and replies to messages you send us. Receives the recipient address and the contents of the email.
• Supabase — hosts our database and stores the photos uploaded to storefronts and products. Information described anywhere in this policy as held by us is held there.
• Sentry — crash and diagnostic reports from the app and website. See Analytics and Diagnostics below.
• PostHog — product analytics. See Analytics and Diagnostics below.
• Expo — delivers push notifications to the seller app and distributes app updates. Receives a push token identifying the device and the contents of each notification.
• Google Places — address suggestions. When a seller types an address into a pickup location, that text is sent to Google to return matching addresses.
• Vercel — hosting for the website and our API. Server logs there include IP addresses and requested URLs.

Analytics and Diagnostics

Crash and diagnostic data. The seller app and the website report errors to Sentry so we can find and fix them. A report includes the error and where in the code it happened, the app version, and the device or browser and operating system. In the seller app, messages the app logs as errors are forwarded too, so a report can contain whatever was being worked on when something broke. Reports are tied to the signed-in account where one exists.

Product analytics. We use PostHog to understand how the app and website are used — which screens are opened, and interactions such as taps and clicks, which are recorded automatically rather than being listed one by one in our code. For a signed-in seller these are associated with the account, including the name and email address on it, so we can tell whether a seller got through setup. Buyers are anonymous while browsing a storefront; once you sign in through a link we sent you, what you do is associated with your customer record, including your name, email address and phone number where we have them.

Session recordings. PostHog also records sessions: a replay of what was on the screen and what was tapped or clicked, so we can see where people get stuck. What you type into a field is masked and is not recorded, and card details are entered in a payment form belonging to Stripe that we cannot record at all. A recording is associated with your account in the same way the analytics above are.

Neither is used for advertising, and we do not sell or share this information with anyone for their own purposes. If you would rather we did not collect it, email the address at the bottom of this page and we will stop — that includes excluding you from session recordings.

Data Retention

We retain your information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. When an account is deleted, we remove personal information as described below, keeping only the records we are required to maintain.

We also keep a record of phone numbers that have replied STOP to our messages, even after an account is deleted. We need that record in order to keep honoring the request not to be contacted.

Pausing Your Storefront

Sellers can put a storefront on hiatus at any time from the Emmer app, under Setup › Profile. A paused storefront stays online but stops accepting orders, follows, and messages. Pausing does not delete anything, has no time limit, and can be reversed whenever you are ready to reopen.

Deleting Your Account

Sellers can delete their account from within the Emmer app, under Setup › Profile › Pause or delete account. Deletion is permanent and cannot be undone — if there is any chance you will return, pause your storefront instead. Deletion normally completes immediately, and always within 24 hours.

Deleting an account removes your login and any devices registered to it, your storefront and its name, description, photos, and links, your follower list and any customer contacts you imported, your message threads with customers, and your notifications. Your storefront address stops working and no longer resolves to anything, so nothing you published remains reachable.

We keep records of completed orders, payments, refunds, and payouts. We are required to retain these for tax and financial recordkeeping, our payment processor keeps its own record of every transaction, and they are also the receipts belonging to the customers who bought from you. Because those records refer to the items and pickup dates they were for, we retain those entries too. All of it is separated from your identity when your account is deleted, and none of it is visible to anyone once your storefront is gone.

If you are a member of a seller account that has other members, deleting your account removes only you. The business and its records stay with the remaining members.

Buyers do not sign up for Emmer directly. An account is created for you when you place your first order and you reach it using a link we send to your phone or email. If you want your personal information removed, email us at the address below and we will delete it, other than the transaction records described above.

Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at the email below. Some information may be retained where required by law.

Children

Emmer is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this Privacy Policy from time to time. Material changes will be communicated through the service or by email.

Contact

Questions about this Privacy Policy? Email privacy@emmer.app.