Privacy Policy

1. INTRODUCTION

This Privacy Policy describes how INTERSHOP GO LLC ("Intershop Go," "we," "us," or "our") collects, uses, discloses, and protects personal information of users ("Users," "you," or "your") of our mobile application and related services (collectively, the "Service").

Intershop Go is a concierge grocery delivery service currently operating within Louisiana: we obtain a participating Store's consent, list a curated selection of that Store's items, and have a Driver purchase and deliver items on your behalf. Intershop Go — not the Store — is the merchant of record for your order.

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.

IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, DO NOT USE THE SERVICE.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide Directly

Account Information: email address, first and last name, username, birthdate (age-gated at signup, minimum 18), phone number, preferred language, password (hashed), account role (Shopper, Store Owner, Driver, or a combined role), billing name/address (used for Stripe billing details, not a separate shipping address), Stripe customer ID and default payment method reference ID (Stripe's reference IDs only — raw card data never touches our servers), push notification token, hashed backup/recovery codes (only for users who opt into two-factor authentication), and consent timestamps for this Policy, our Terms of Service, and our Cookie Policy.

Store Information (for Store Owner accounts): store name and description, store address and contact information, business hours, and item listings (names, descriptions, prices, images) maintained within Intershop Go's own catalog system.

Order Information: items ordered and quantities, order subtotal/taxes/fees/tip, scheduled delivery day and time preference, delivery address (which may differ from your billing address), order status and history, and the assigned Driver's identifier while an order is active.

Payment Information: payment method details, tokenized and processed by Stripe. We do not store your full card number or CVV. We retain only limited Stripe reference identifiers necessary to process your orders.

Delivery Information: delivery address, delivery instructions, and any tip amount you choose to add for your Driver.

Driver Information (for Driver accounts): whether a user is approved and active as a Driver, gating access to Driver-only features.

Communication Data: messages sent through our support system, reviews and ratings you submit, and correspondence with customer support.

2.2 Information Collected Automatically

Device Information: device type, model, operating system, and related device identifiers.

Location Information: precise GPS location (with your permission) and IP-based approximate location, both used to confirm you are within our current Louisiana service area before we allow you to complete a payment-related action; delivery addresses you provide.

Usage Data: app features accessed, screens viewed, search queries, items viewed or purchased, notification interactions, and app crash/error logs.

Log Data: IP address, device/app version, and timestamps associated with your requests.

2.3 Information From Third-Party Sources

Stripe: payment processing results, fraud/risk signals associated with your transactions.

Supabase: authentication and account data as stored in our database.

ipapi.co: IP-based location data used to verify you are within our service area.

We do not currently use Firebase or a comparable third-party analytics/advertising SDK. If that changes, we will update this Policy.

3. HOW WE USE YOUR INFORMATION

3.1 Service Delivery and Operations

We use your information to create and maintain your account; authenticate you; process your Orders (including having a Driver shop for and deliver your items); calculate applicable taxes and fees; process payments (including authorization holds and captures) through Stripe; coordinate delivery, including sharing limited information with your assigned Driver as described in Section 4; respond to support requests and refund requests; and enforce our Terms of Service.

3.2 Service Improvement

We use aggregated or de-identified usage data to understand how the app is used, identify and fix bugs, and improve app performance and features.

3.3 Security and Fraud Prevention

We use your information to protect against unauthorized access, detect and prevent fraud, monitor for suspicious activity, and comply with legal obligations, including responding to legal requests and enforcing our Terms.

3.4 Communications

We use your contact information to send order status updates, push notifications, and, where you have consented, promotional communications.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We share it only as described below.

4.1 With Stores

When you place an order at a Store, that Store's authorized Store Owner account can see your first name, last name, and email address, so the Store can be told who an order or refund request relates to. This access is limited to those three fields (it does not include your billing address, payment method details, or other account data) and is limited to orders you have actually placed at that specific Store — a Store Owner cannot see this information for a customer who has never ordered from them.

4.2 With Drivers

Once a Driver accepts your delivery order, we share your delivery address, order details, and your phone number with that Driver, and we share your Driver's phone number with you, so the two of you can coordinate the delivery directly by phone call or text message through your own phone's native calling/messaging apps. We do not see or store the content of those calls or texts. This phone number sharing is scoped to that specific, active order — it ends once the order is marked delivered or cancelled, and is not a standing connection between your account and any Driver's.

4.3 Service Providers

We share information as necessary with the vendors that help us operate the Service:

• Stripe — payment processing, fraud detection, and (for Store Owners and Drivers, where applicable) payout-related information
• Supabase — our database, authentication, and backend hosting provider
• Expo — delivery of push notifications
• ipapi.co — server-side IP location verification for our service-area restriction
• OCR.space — used by Store Owners to extract text from a photographed price tag or label when adding an item
• imgbb — hosting for item and store photos
• images.weserv.nl — resizes item and store photos so they load faster; it only receives the already-public photo URL, no account information

4.4 Legal and Safety

We may disclose information to comply with legal obligations, court orders, subpoenas, or government requests; to protect the rights, property, or safety of Intershop Go, our Users, or the public; to investigate fraud or illegal activity; or to enforce our Terms of Service.

4.5 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred to the successor entity. We will provide notice of any such transfer and any resulting changes to this Policy.

4.6 With Your Consent

We may share information with third parties for purposes you separately consent to, such as connecting a social account.

5. DATA SECURITY

We implement technical and organizational measures intended to protect your information, including encryption of data in transit, hashed passwords, role-based access controls, Row-Level Security policies on our database, request signing on sensitive server operations, rate limiting, and optional two-factor authentication that you may enable on your account.

NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. WE CANNOT GUARANTEE ABSOLUTE SECURITY OF YOUR INFORMATION. You are responsible for maintaining the confidentiality of your password and for notifying us immediately of any unauthorized access to your account.

6. DATA RETENTION AND DELETION

6.1 While Your Account Is Active

We retain your account and order information for as long as your account remains active, in order to operate the Service (for example, to show you your order history).

6.2 Account Deletion

You may request deletion of your account at any time in-app or by contacting us. Account deletion removes your reviews, refund requests, orders and related order records, any Stores and items you own, rate-limit records, and your account itself from our application database, and it cannot be reversed or recovered by us afterward.

Financial and transaction records associated with your payments are separately retained by Stripe, our payment processor, under Stripe's own retention practices and applicable law (including tax, accounting, and financial recordkeeping requirements). We rely on those Stripe-held records, together with the limited Stripe reference identifiers described in Section 2.1, to satisfy our own financial recordkeeping obligations even after your account and order history have been deleted from our systems. If you anticipate needing a copy of your order history for your own records (for example, for a return, warranty, or personal tax purpose), we recommend saving or exporting what you need before requesting deletion, since we will generally no longer be able to retrieve that level of order detail from our own systems once it is deleted.

Routine backups of our database are not immediately purged when you delete your account, but are not used by us for any ongoing purpose after your deletion request and are cycled out over time in the normal course of our backup practices.

7. YOUR RIGHTS AND CHOICES

7.1 Access and Correction

You can review and update most of your account information directly in the app. You may also contact us to request a copy of the personal information we hold about you.

7.2 Deletion

See Section 6.2 above.

7.3 Communications Preferences

You can opt out of promotional emails via the unsubscribe link, disable push notifications in your device or app settings, and manage location permissions through your device settings (noting that disabling location may limit your ability to use the Service, since we use location to confirm you are in our service area).

7.4 Exercising Your Rights

To exercise these rights, contact us at officialintershopgo@intershopgo.com with the subject line "Privacy Rights Request," including your name, account email, and the specific request. We will respond within 30 days, or as required by applicable law, and may require identity verification before processing your request.

8. CHILDREN'S PRIVACY

The Service is not intended for, and account creation is not permitted for, anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe a minor has created an account or provided us with personal information, contact us at officialintershopgo@intershopgo.com and we will take steps to delete the information and the associated account.

9. INTERNATIONAL DATA TRANSFERS

Our servers and service providers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

10. THIRD-PARTY SERVICES AND LINKS

The Service integrates with the third-party services listed in Section 4.3. These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for their data collection practices, privacy policies, or security measures. The Service may also contain links to external websites; accessing them is at your own risk.

11. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA/CPRA, including the right to know what personal information we collect, use, and disclose about you; the right to request deletion (subject to certain legal exceptions); and the right to non-discrimination for exercising your rights. We do not sell personal information as defined by the CCPA. You may exercise these rights by contacting us as described in Section 7.4.

12. CHANGES TO THIS PRIVACY POLICY

We may modify this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy in the app and updating the "Last Updated" date, and, where required by law, by additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the modified Policy.

13. COOKIES AND SIMILAR TECHNOLOGIES

See our separate Cookie Policy, available in-app, for details on the session and local-storage technologies we use to keep you logged in, maintain your cart, and understand app usage.

14. DO NOT TRACK SIGNALS

Some browsers transmit "Do Not Track" (DNT) signals. We do not currently respond to DNT signals because there is no common industry standard for compliance.

15. SENSITIVE PERSONAL INFORMATION

We do not intentionally collect sensitive categories of personal information, such as health information, government identification numbers, or precise biometric identifiers, except where you voluntarily provide such information to us (for example, in a support request), in which case it will be handled consistent with this Policy.

16. DISCLAIMER

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE ARE NOT LIABLE FOR unauthorized access to or disclosure of your information caused by circumstances beyond our reasonable control, data breaches caused by third parties, or your failure to secure your own account credentials. You acknowledge that no method of internet transmission or electronic storage is completely secure.

17. CONTACT US

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us:

INTERSHOP GO LLC

Email: officialintershopgo@intershopgo.com

Subject Line: "Privacy Inquiry"

We will respond to inquiries within 30 days, or as required by applicable law.

18. ACKNOWLEDGMENT AND CONSENT

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY, AND YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED, INCLUDING THE LIMITED SHARING OF YOUR NAME, EMAIL, AND/OR PHONE NUMBER WITH STORES AND DRIVERS AS NECESSARY TO FULFILL YOUR ORDERS.

IF YOU DO NOT AGREE, DO NOT USE THE SERVICE.