This Privacy Policy explains how Panda Eats Platform LLC(“Panda Eats,” “we,” “us”) collects, uses, and shares personal information when you visit our website, create an account, or use our online ordering platform (the “Service”).
1. Our role
For information about the restaurants that use Panda Eats and visitors to our marketing site, we act as the controller. When a diner places an order with a restaurant through our Service, the restaurant is the controller of that diner’s information and Panda Eats acts as a processorthat handles the data on the restaurant’s behalf.
2. Information we collect
- Account & business information: name, email, password, restaurant name, address, and contact details you provide when you sign up.
- Order information: the contents of orders, customer name and contact details, delivery addresses, and order notes submitted through the ordering widget.
- Payment information: card payments are collected and processed by Stripe. We do not store full card numbers; we receive limited transaction details such as amount, status, and the last four digits.
- Usage & device data: IP address, browser type, pages viewed, and similar technical information collected through cookies and our error-monitoring tools.
- Support communications: messages you send us and the information they contain.
3. How we use information
- To provide, operate, secure, and improve the Service.
- To process orders, payments, and payouts.
- To communicate with you about your account, support requests, and important Service changes.
- To detect, prevent, and address fraud, abuse, and technical issues.
- To comply with our legal obligations.
4. How we share information
We do not sell your personal information. We share it only with service providers that help us run the Service, when required by law, or in connection with a business transfer. Our key providers (subprocessors) are:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing and payouts to restaurants |
| Supabase | Account authentication and database |
| DigitalOcean | Server hosting and infrastructure that run the Service |
| Mapbox | Maps used to define and check delivery zones |
| hCaptcha | Bot and spam protection on forms |
| Sentry | Error monitoring and performance diagnostics |
| Resend | Sending account, order, and notification emails |
| Groq | AI that powers the chat assistant on our marketing website |
| Anthropic | AI that powers the support chat assistant inside the dashboard |
| Firebase Cloud Messaging | Push notifications to restaurant order tablets |
| Upstash | Rate limiting to protect the Service from abuse (processes visitor IP addresses) |
5. Cookies
We use cookies and similar technologies to keep you signed in, secure our forms, and understand how the Service is performing. For details and your choices, see our Cookies Policy.
6. Data retention
We keep personal information for as long as your account is active or as needed to provide the Service, and afterward only as long as necessary to meet legal, accounting, or reporting requirements. When information is no longer needed, we delete or anonymize it.
When you delete your information, it is removed from our live systems immediately and permanently, and works its way out of our backups within 30 days as they age out. We never restore a backup in order to bring deleted information back. Records of the money involved in past orders, such as totals, tax, tips, fees, and refunds, are kept because restaurants need them for their accounting and tax obligations, but they no longer identify you.
7. Security
We use technical and organizational measures designed to protect your information, including encryption in transit and restricted access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To make a request, email us at hello@getpandaeats.com.
If you ordered from a restaurant as a diner, you can see, download, or delete your information at any time using the “Manage your personal data” link at the bottom of your order confirmation email. Each restaurant keeps its own separate records, so the link covers the restaurant that email came from. For anything else, including correcting details that are wrong, email us at hello@getpandaeats.com.
9. Children
The Service is intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
10. International transfers
We are based in the United States, and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date, and we will provide additional notice if the changes are material.
12. Contact
For privacy questions or requests, contact us at hello@getpandaeats.com, or by mail at Panda Eats Platform LLC, Miami, Florida 33196.