Privacy Policy

This policy explains how Diplos Marketing LLC (“PizzaDrop”, “we”) handles personal information for Customers (businesses that send pizza offers) and Recipients (people who claim them). We collect only what we need to deliver lunch, and we don't sell personal information.

What we collect

• Customers: account email and password (stored hashed), company name and logo, the list of email addresses you upload, and payment details — card payments are processed by Stripe; we don't store card numbers.
• Recipients: name, work email, company, office delivery address (including suite/floor), a mobile number for the driver, delivery time, food preferences and delivery notes.
• Technical data: a login cookie for Customers, and basic logs (such as IP address and pages requested) used for security, rate limiting and debugging.

How we use it

• To run the service: verify claims, find delivery times, place and track orders, and send confirmations and alerts.
• To tell the Customer who claimed: name, work email, company, and claim and delivery status. Customers never see Recipients' delivery addresses.
• To prevent fraud and abuse, and to meet legal obligations.

We don't use Recipient information for our own marketing, and we don't sign Recipients up for marketing from the restaurants or ordering services we use.

Who we share it with

• The restaurant and the ordering/delivery services that fulfil the order receive what's needed to deliver it: name, phone number, delivery address and notes.
• Service providers that help us run PizzaDrop, under contract and only for that purpose — hosting and database, email delivery, payments and card issuing, address lookup, and browser automation used to place orders.
• The Customer who sent the offer, as described above.
• Authorities, where required by law.

How long we keep it

• Recipients' street address, suite/floor, phone number and delivery notes are deleted automatically 30 days after the delivery date. City, state and ZIP are kept for reporting.
• Records of who claimed (name, work email, company) stay in the Customer's account until the Customer deletes them or closes their account.
• Billing records are kept as long as required for tax and accounting.

Your choices and rights

You can ask us to access, correct or delete your personal information, subject to legal limits. Recipients can also ask the Customer who contacted them directly. Depending on where you live (for example, California), you may have additional rights; we honor them and won't discriminate against you for using them.

Security

Data is encrypted in transit; claim links use long random tokens stored encrypted; access to delivery details is limited to what's needed to fulfil orders. No system is perfectly secure, but we work to protect your information.

Children

PizzaDrop is a business service and isn't directed to children under 16.

Changes and contact

We'll post updates here and change the date above. Privacy questions or requests: hello@pizzadrop.ai.