GrubRoamer · Policies & support
Privacy Policy
What we collect, how we use it, and how to contact us about your information.
Version:
Who to contact
This policy covers the GrubRoamer website and its booking and operator services. Email hello@grubroamer.com with the subject “Privacy request” for questions, access, correction, deletion, or account closure requests. Do not include passwords, card numbers, or tax documents in an email request.
Information you provide
We collect account and contact details, password hashes, verification and login records, event details, offers, booking records, support messages, and operator profile information. Event requests can include location and dietary needs. Describe dietary requirements without naming individual guests or providing unnecessary medical information. Public photos, menus, descriptions, and schedules you submit may appear on your listing. If you use Grubby, our AI event-planning assistant, your conversation and draft event answers are sent to Anthropic to help prepare a request. Do not put passwords, payment-card details, SSNs, or sensitive documents in chat. Check the resulting event details before submitting; AI replies can be inaccurate.
Public records and technical information
Directory records come from the Florida DBPR public license register, including business names, license details, cities, and business contact information. A license address is not a truck’s service location. Hosting and service providers may process IP addresses, device/request information, security logs, and delivery records. We use cookies for account access and browser session storage for form drafts; see the Cookies & Storage notice.
Documents and automated checks
When you upload a license, insurance certificate, or W-9, the full file is sent to Anthropic for automated reading, which can include any SSN or EIN visible on a W-9. We use extracted details to check the document against the listing and applicable requirements. Accepted files are stored in private Supabase storage. Documents are not published on listings or shared with customers through the document-upload feature. Automated checks can make mistakes; contact us to ask for a review.
How we use and share information
We use information to provide accounts, match event requests, coordinate bookings, process payments, check operator documents, send service messages, prevent misuse, and respond to support requests. Relevant event details are shared with prospective operators; booking contact details are shared as needed to arrange the event. Avoid putting confidential information in request notes. Public profile content is visible to visitors and search engines.
Service providers
Providers supporting these functions include Vercel for hosting, Supabase for databases and file storage, Stripe for payments, Anthropic for document reading and AI event-planning conversations, and Google Workspace and/or HighLevel for messages and contact management. They receive information needed for their functions. Payment card details are entered with the payment processor; GrubRoamer receives transaction references and statuses. Providers may process information in the United States and other countries where they operate. Information may also be disclosed where required by law or necessary to investigate fraud or protect rights.
Retention and security
Account, listing, booking, document, and operational records are retained while needed to run the service and handle support, disputes, accounting, security, or legal obligations. Uploaded documents currently have no automatic age-based deletion schedule; replacing a document does not necessarily remove earlier stored copies. Rejected document files are not stored by our upload workflow, but extracted results and check records may remain, and provider retention is separate. You may request deletion or a retention explanation. Access controls and private storage reduce risk, but no system can guarantee absolute security.
Your choices and requests
You can edit account or listing details and manage operator alerts in your dashboard. Email hello@grubroamer.com to request access, correction, deletion, or account closure. We may verify your authority before releasing or changing information. Some records may need to remain for existing bookings, disputes, fraud prevention, accounting, or legal obligations; we will explain relevant limits when responding. Removing an account does not automatically remove a public-record listing: request listing removal separately if desired. The corrections page provides that route.
Messages, children, and changes
Service emails cover account access and requested bookings. Optional catering alerts have separate preferences; see Messaging Preferences. The service is intended for adults and is not directed to children under 13. Contact us if a child has submitted information. We will update the version date when this policy changes and provide additional notice when appropriate.