Privacy Policy

Local Feast Co ("Company," "we," "us," or "our") operates an online platform that connects customers with local catering vendors for private and corporate events throughout the United States. This Privacy Policy describes how we collect, use, store, and protect information obtained through our website at localfeastco.com and any related services (collectively, the "Platform").

By using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2.1 Information You Provide Directly

• Customers: Name, email address, phone number, event details (type, date, location, guest count, budget), and any special notes you include in an event request.
• Vendors: Business name, contact email, phone number, cuisine type, service category, city and state, website, Instagram handle, business description, and menu or gallery images.
• Vendor Banking Information: Bank account details (account number, routing number, or equivalent payout information) provided voluntarily for payment processing purposes.
• All Users: Login credentials (email address and password hash) and profile information for platform accounts.

2.2 Information Collected Automatically

We may collect standard server log data such as IP address, browser type, pages visited, and timestamps when you access the Platform. This information is used solely for platform security, performance monitoring, and internal analytics. We do not use third-party behavioral tracking or advertising pixels.

2.3 Information We Do Not Collect

We do not knowingly collect information from children under the age of 13. The Platform is intended solely for users aged 18 and older. We do not collect Social Security numbers or government-issued identification.

We use collected information exclusively for the following internal purposes:

• Event Matching: To match customer event requests with available vendors based on location, cuisine type, and availability.
• Booking Management: To create, confirm, track, and close event bookings between customers and vendors.
• Communications: To send transactional emails such as booking confirmations, vendor quotes, status updates, password resets, and post-event feedback requests.
• Vendor Payments: Banking and payout information provided by vendors is used solely to process vendor compensation for completed bookings. It is never used for any other purpose.
• Platform Improvement: Aggregated, anonymized usage data is analyzed internally to improve the Platform's features and user experience.
• Customer Reviews: Feedback submitted after an event is used to calculate vendor ratings displayed on the Platform.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent or unauthorized activity.

We do not sell, rent, trade, or otherwise transfer your personal information to any third party outside of Local Feast Co for commercial or marketing purposes. Period.

The only sharing that occurs is strictly operational:

• Between Customers and Vendors: When a booking is confirmed, limited event details (event type, date, guest count, location) are shared with the assigned vendor so they can prepare for and fulfill the event. Vendor contact details are never shared publicly or with customers through the Platform.
• Service Providers: We use Supabase (database infrastructure) and Resend (transactional email delivery) as technical service providers. These providers process data on our behalf under contractual data processing agreements and are not permitted to use your data for their own purposes.
• Legal Requirements: We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Local Feast Co, our users, or the public.

No marketing companies, data brokers, advertisers, or other third parties receive your personal information.

Vendor bank account and payout details are treated with the highest level of sensitivity. This information is:

• Stored in an access-restricted database environment with role-level security controls
• Visible only to the vendor themselves and authorized Local Feast Co administrators
• Used exclusively to process payment for completed event bookings
• Never shared with customers, other vendors, or any external party
• Never used for credit assessment, marketing, or any purpose other than payment processing

We retain your personal information for as long as your account is active or as needed to provide services. If you request deletion of your account or information, we will remove your personal data within 30 days, except where retention is required by law (e.g., financial records related to completed transactions may be retained for up to 7 years in accordance with U.S. tax law).

We implement industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission via HTTPS/TLS
• Row-level database security controls restricting data access by user role
• Service-role API keys that never reach client-side code
• Time-limited, single-use tokens for password reset and account setup flows
• Passwords stored as cryptographic hashes — never in plain text

No method of electronic storage or transmission is 100% secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security.

8.1 California Residents — CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. There is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at admin@localfeastco.com.

8.2 All U.S. Residents

Regardless of your state of residence, you may contact us at any time to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

We will respond to verifiable requests within 45 days.

All emails sent by Local Feast Co are transactional in nature (booking confirmations, status updates, password resets, feedback requests). We do not send unsolicited marketing emails. Each transactional email identifies Local Feast Co as the sender and provides a way to contact us. If you believe you have received an unwanted email, contact us at admin@localfeastco.com.

The Platform is not directed to, and we do not knowingly collect personal information from, children under the age of 13. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided information to us, please contact us at admin@localfeastco.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised effective date. Continued use of the Platform after the effective date constitutes acceptance of the updated policy. For material changes, we will provide additional notice (such as an email notification) where appropriate.

For any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us: