Privacy Policy | Jamdash Courier

1. Introduction

Jamdash Courier ("Jamdash", "we", "us", or "our") operates the Jamdash platform, which connects customers, restaurants, and couriers for food ordering and delivery. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile experience, and related services (collectively, the "Service").

2. Information We Collect

Account data: name, email, phone number, password hash, and role (customer, restaurant, or courier).
Order data: items ordered, delivery address, prices, and order status.
Payment data: processed by our payment provider (Square). Jamdash does not store full card numbers.
Location data: approximate delivery and courier locations, used to route deliveries.
Device & usage data: IP address, browser, device type, and interactions with the Service.
Clover integration data: when a restaurant connects Clover, we receive merchant identifiers, OAuth tokens, menu categories, menu items, prices, modifiers, and item images. We use this data solely to sync the restaurant's menu into Jamdash.

3. How We Use Information

Provide, maintain, and improve the Service.
Process orders and payments and coordinate delivery.
Sync menu data from connected POS systems (e.g., Clover).
Communicate with you about your account, orders, and support.
Detect and prevent fraud, abuse, and security incidents.
Comply with legal obligations.

4. Clover Data

Jamdash uses the Clover API only with the explicit authorization of the restaurant owner. We request read access to inventory and merchant information for the sole purpose of importing menu data into Jamdash. We do not write back to Clover, do not access Clover payment or customer data, and do not share Clover data with third parties except as required to operate the Service or by law. Restaurants may disconnect Clover at any time from the Restaurant Dashboard; on disconnection we revoke stored tokens and stop syncing.

5. Sharing of Information

We share information with: (a) restaurants and couriers to fulfill your orders; (b) service providers such as our hosting, database, and payment processors; (c) authorities when required by law; and (d) successors in the event of a merger or acquisition. We do not sell personal data.

6. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Clover OAuth tokens are deleted when a restaurant disconnects the integration.

7. Security

We use industry-standard safeguards including TLS in transit, encrypted storage of credentials, and Row-Level Security on our database. No system is perfectly secure; you use the Service at your own risk.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

9. Children

The Service is not directed to children under 13.

10. Changes

We may update this policy from time to time. Material changes will be communicated via the Service or by email.

11. Contact

Questions? Email privacy@jamdashcourier.ca.