CoveyPrivacy Policy
Covey is operated by Service Pricer LLC. This policy explains how we handle information for restaurant owners, customers, signup/login, Google OAuth, Stripe card verification, menu setup, QR/widget pages, and order workflows.
1. Information we collect
We may collect account data such as name, email, password hash, Google identity email, restaurant name, phone, address or service area, menu drafts, public page settings, order records, customer handles, messages, payment status, device/IP information, security events, and support communications.
When a user signs in with Google, Covey receives the basic profile information authorized by the user, such as email and verification status. Covey does not receive the user's Google password.
2. How we use information
- Provide signup, login, owner dashboards, PWA access, and account setup.
- Save restaurant details, menu drafts, public QR/widget links, and order pages.
- Verify cards and operate billing through Stripe without storing full card numbers.
- Operate order, payment-confirmation, customer support, security, and abuse-prevention workflows.
- Improve reliability, debug errors, maintain records, and comply with law.
3. How we share information
We share information with service providers that help run Covey, including Cloudflare for hosting/security, Supabase for database services, Google for OAuth if chosen, Stripe for payment/card verification, email or support providers where enabled, and professional advisors or authorities when required by law.
Covey does not sell restaurant customer data. If advertising features are enabled later and qualify as sale, sharing, or targeted advertising under a state law, Covey will provide required disclosures and opt-outs.
4. Payments and card data
Stripe handles card verification and payment processing. Covey may store Stripe customer IDs, payment method IDs, billing status, invoices, account-freeze status, and payment metadata. Covey does not store full card numbers, CVV codes, or bank credentials on its own servers.
5. Retention and security
We retain account, restaurant, order, and billing records as needed to provide the service, support users, prevent fraud, resolve disputes, comply with tax/legal obligations, and maintain security. We use HTTPS, access controls, scoped credentials, session gates, Turnstile, tenant separation, and operational logging, but no internet service can be guaranteed perfectly secure.
6. Privacy choices and rights
Depending on your location, including California and other U.S. states, the EEA, UK, Switzerland, Canada, or other regions, you may have rights to access, correct, delete, export, restrict, or opt out of certain uses of personal information. Contact us using the Privacy Choices page.
7. Sensitive data
Covey is not designed for regulated medical records, Social Security numbers, government IDs, passwords, private keys, or other highly sensitive information unless a feature clearly says it supports that category and proper agreements are in place.
8. Children's privacy
Covey is intended for users 18 and older and for business use. We do not knowingly collect personal information from children.