Privacy Policy

Instafresh ("we," "us," or "our") operates the Instafresh grocery delivery marketplace at instafresh.polsia.app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

By using Instafresh, you agree to the practices described in this policy. If you do not agree, please do not use our service.

1. Information We Collect

Information you provide directly:

• Account information: Name, email address, phone number, and password when you create an account.
• Order information: Delivery address, order contents, and order preferences when you place an order.
• Payment information: Billing address and payment method details. We do not store raw card numbers — see Section 4.
• Communications: Messages you send us through the contact form, support emails, or other direct communications.
• Vendor applications: Business name, contact information, and store details if you apply to be a vendor.

Information collected automatically:

• Usage data: Pages visited, products viewed, search queries, click patterns, and browsing behavior on our platform.
• Device information: IP address, browser type, operating system, and device identifiers.
• Location data: General location based on IP address. Precise location only if you grant permission in your browser.
• Cookies: Session tokens, preferences, and cart contents (see Section 5).

2. How We Use Your Information

We use the information we collect for the following purposes:

• Fulfilling orders: Processing purchases, coordinating delivery with vendor partners and drivers, and sending order confirmations and tracking updates.
• Account management: Creating and maintaining your account, authenticating your identity, and enabling account features.
• Customer support: Responding to inquiries, resolving order issues, and processing refund requests.
• Service improvement: Analyzing usage patterns to improve the shopping experience, search functionality, and product recommendations.
• Communications: Sending transactional emails (order confirmations, delivery updates). We will not send marketing emails without your explicit opt-in.
• Safety and fraud prevention: Detecting and preventing fraudulent orders, chargebacks, and abuse of our platform.
• Legal compliance: Meeting our legal obligations under applicable U.S. law.

3. Information We Share

We do not sell your personal information. We share your data only in the following circumstances:

• Vendor partners: We share order details (name, delivery address, order contents) with the relevant vendor(s) so they can pack and fulfill your order.
• Delivery drivers: We share your name, delivery address, and phone number with the assigned driver to enable delivery.
• Payment processors: We share payment information with Stripe to process transactions. See Section 4.
• Service providers: We may share data with third-party service providers who assist with platform operations (e.g., hosting, email delivery, analytics) under strict data processing agreements.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of Instafresh, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4. Payment Processing

All payment transactions on Instafresh are processed by Stripe, a third-party payment processor. When you enter payment information at checkout, that data is transmitted directly to Stripe's secure servers over an encrypted connection.

We never store your raw card number, CVV, or full payment credentials on our servers. Stripe returns a secure payment token that we use to identify completed transactions.

Stripe's handling of your payment data is governed by Stripe's Privacy Policy. Stripe is PCI-DSS Level 1 certified.

For Cash on Delivery orders, no card data is collected at checkout. Payment is made in person to the delivery driver.

5. Cookies and Tracking

Instafresh uses cookies and similar technologies to:

• Session management: Keep you logged in to your account across page loads.
• Cart persistence: Remember items in your shopping cart during your session.
• Preferences: Store your delivery location and browsing preferences.
• Analytics: Understand how visitors use the site to improve it.

Most browsers allow you to refuse or delete cookies through browser settings. Note that disabling cookies may affect functionality, including the ability to stay logged in or maintain your cart.

We do not use third-party advertising trackers or sell data to advertising networks.

6. Data Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. This includes:

• HTTPS encryption for all data in transit
• Hashed and salted password storage (bcrypt)
• Secure, time-limited authentication tokens for account sessions
• Encrypted storage of sensitive credentials
• Access controls limiting which personnel can access personal data

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we commit to notifying affected users promptly in the event of a confirmed data breach affecting their personal information.

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your account and associated personal data. We will honor deletion requests within 30 days, subject to legal retention obligations.
• Portability: Request your data in a portable format.
• Opt-out: Unsubscribe from marketing emails at any time using the unsubscribe link or by contacting us.

To exercise any of these rights, email us at privacy@instafresh.polsia.app or use our contact form. We'll respond within 10 business days.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained until you request deletion.
• Order history is retained for 3 years for tax and compliance purposes.
• Session tokens expire automatically (customer sessions: 30 days; vendor sessions: 7 days).
• Email verification tokens expire after 15 minutes.

After the applicable retention period, data is securely deleted or anonymized.

9. Children's Privacy

Instafresh is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@instafresh.polsia.app and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email.

Continued use of Instafresh after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries, requests, or concerns:

• Email: privacy@instafresh.polsia.app
• General support: instafresh.polsia.app/contact
• Address: Instafresh · Houston, TX