Home Privacy

Privacy policy

Last updated 2026-05-04.

Plain-English summary: we collect the data we need to run the platform — your account info, your operational data, and the basics of how you use the site. We don't sell it, we don't share it with advertisers, and you can ask us to delete it.

1. Information we collect

Account information

When you create an APFoods account, we collect your name, email, phone (optional), company, and role. When customers configure a tenant, we collect billing contact, payment terms, and tax IDs.

Operational data

The data your team enters into the platform — orders, invoices, customers, items, inventory, routes, payments — is your data. We process it on your behalf to provide the service. We don't use it for any purpose other than running the platform for you.

Usage data

We collect basic page-view, click, and error telemetry to improve the product. This is anonymized and aggregated where possible. We use first-party cookies for session authentication only — no third-party advertising cookies.

2. How we use information

To provide and maintain the APFoods platform.
To respond to your support requests.
To send you transactional emails (invoices, password resets, account notifications).
To send you product updates and educational content if you've opted in (you can unsubscribe anytime).
To diagnose problems and improve performance.

3. Data sharing

We do not sell your data. We share data only with:

Subprocessors we use to operate the platform — cloud hosting (AWS / GCP), payment processing (Stripe), email delivery (SendGrid), error tracking (Sentry). All are bound by data-protection contracts.
Legal requirements — we'll comply with subpoenas and court orders, and we'll tell you about it unless legally prohibited.

4. Your rights

You can request access, correction, or deletion of your personal data at any time by emailing admin@apfoodz.com. EU and California residents have additional rights under GDPR / CCPA, which we honor.

5. Data retention

We retain your data while your account is active and for 30 days after cancellation, then we delete or anonymize it. Tenant accounting records are retained for 7 years to comply with tax law.

6. Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Production systems require MFA. SOC 2 Type 1 audit is in progress; Type 2 follows. See our security page for details.

7. Contact

Questions about this policy: admin@apfoodz.com. General contact: admin@apfoodz.com.

This is a placeholder draft. The final policy will be reviewed by counsel before launch.