Privacy Policy
We take your privacy seriously. This policy explains what information we collect, how we use it, and your rights regarding that information.
Talachero LLC, operator of Catertoo - October 2026
Information We Collect
We collect information you provide directly - such as your name, email address, business details, and billing information when you register or update your account. We also collect information generated through your use of the service, including client records, event data, proposals, and payment activity that you enter into the platform.
How We Use Your Information
We use the information we collect to provide, maintain, and improve the platform; to process payments and send transactional emails; to respond to your support requests; to send product and policy updates you have opted into; and to detect and prevent fraud or abuse.
Data Isolation and Security
Each catering business operates in an isolated data environment. Your client records, events, proposals, and financial data are never accessible to other businesses on the platform. All data is encrypted in transit using TLS and at rest at the storage layer. Passwords are hashed and never stored in plain text.
Payment Data
We do not store raw payment card numbers. Payment processing is handled by Stripe, Inc., a PCI DSS Level 1 certified processor. When you connect a Stripe account, you are subject to Stripe's own privacy policy. We receive only the minimal metadata needed to record and display transaction status.
Service Providers and Subprocessors
We rely on a small set of vendors to operate the service. Current subprocessors include: Fly.io (application hosting and managed databases, primary region in California, USA); Stripe, Inc. (payment processing and Connect onboarding); our transactional email provider for account, billing, and notification emails; Functional Software, Inc. (Sentry) for application error reports, which can include details of the request that failed; and Google LLC for analytics on our public marketing pages. All subprocessors are bound by written agreements requiring confidentiality and a level of data protection consistent with this policy. We also work with two advertising partners, Google LLC (the Google Ads tag) and Meta Platforms, Inc. (the Meta Pixel), as described under "Sharing of Information" and "Cookies and Analytics"; they use what our ad tags send them under their own terms and privacy policies. We will update this section as our infrastructure evolves.
Sharing of Information
We do not sell your personal information. We share data with the service providers listed above only to the extent necessary to operate the platform on your behalf. Our ad tags also share limited data with our advertising partners, Meta Platforms and Google: a cookie identifier, the pages you visit on our website and in the app, and two milestones, creating an account and adding your first client. We use this to measure our advertising and to show Catertoo ads to people who have visited us, which California law treats as sharing personal information for cross-context behavioral advertising. You can opt out at any time on our Do Not Sell or Share My Personal Information page, linked at the top of this policy, in the footer of our website and in the app, or by turning on Global Privacy Control in your browser. Either applies to the browser you use it in, so opt out in each browser you use, or write to privacy@catertoo.com. We may disclose information if required by law or to protect the rights and safety of our users or the public.
Data Retention
We retain your account data for as long as your subscription is active and for up to ninety (90) days following the end of your subscription, after which we will delete or anonymize the data, except where a longer period is required by law (for example, tax or financial records) or necessary to resolve a pending dispute. You may request earlier deletion of your account and associated data at any time by contacting privacy@catertoo.com, subject to those same legal retention requirements.
Your Rights
Depending on your location, you may have the right to access, correct, or delete your personal information; to restrict or object to certain processing; and to data portability. To exercise any of these rights, contact us at privacy@catertoo.com. We will respond within 30 days.
California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you additional rights. In the past twelve months we have collected the following categories of personal information about California residents: identifiers (such as name, email, business name, and cookie identifiers), commercial information (such as subscription and billing records), internet or other electronic network activity (such as log and usage data, and the pages you visit on our website and in the app), and inferences drawn from the foregoing to operate and improve the service. We collect this information from you directly, from your use of the service, and from our service providers (such as Stripe). We use it for the purposes described in "How We Use Your Information." We do not sell personal information. We share two of these categories, identifiers (a cookie identifier) and internet or other electronic network activity (the pages you visit, and when you create an account or add your first client), with Meta Platforms and Google for cross-context behavioral advertising. You have the right to opt out of this sharing: use our Do Not Sell or Share My Personal Information page in each browser you use, turn on Global Privacy Control, which we honor as a request to opt out for the browser that sends it, or write to privacy@catertoo.com. We do not knowingly sell or share the personal information of consumers under 16, and we do not knowingly process the sensitive personal information of California residents beyond what is necessary to provide the service. California residents may request to know, delete, or correct their personal information, and may designate an authorized agent to act on their behalf, by contacting privacy@catertoo.com. We will not discriminate against you for exercising these rights.
European Privacy Rights
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (and equivalent UK and Swiss laws) give you additional rights. Talachero LLC, the operator of Catertoo, is the controller of personal information you provide directly to us. We process personal information on the following legal bases: performance of our contract with you, our legitimate interests in operating and improving the service, your consent where required, and compliance with legal obligations. You have the right to access, correct, delete, restrict, port, or object to the processing of your personal information, and the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact privacy@catertoo.com. Personal information may be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction; where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.
Children's Privacy
The service is intended for use by businesses and is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact privacy@catertoo.com and we will delete it.
Security Incidents
We maintain administrative, technical, and physical safeguards designed to protect personal information. In the event of a confirmed personal-data breach that affects you, we will notify you and any required regulatory authority without undue delay and in accordance with applicable law, and we will share the information you need to assess the impact and respond.
Cookies and Analytics
We use session cookies necessary for authentication and application state. On our public marketing pages we use Google Analytics (GA4) to measure aggregate traffic; IP addresses are anonymized before they reach Google. We also use two ad tags, the Google Ads tag and the Meta Pixel, on our marketing pages and in the Catertoo app, its sign-up and sign-in pages included. They set cookies, report the pages you visit, and record two milestone events, account creation and the creation of your first client, so we can measure our advertising and show Catertoo ads on Google, Facebook and Instagram to people who have visited us. Inside the application, GA4 page-view tracking is deliberately disabled, and the Meta Pixel's automatic collection of button and page details is turned off. We never send your client records, event details, proposals, invoices, or financial data to any third party. The ad tags do not load in a browser that sends Global Privacy Control, or that has opted out on our Do Not Sell or Share My Personal Information page; there, Google Analytics runs with Google's advertising features turned off. Opting out on that page sets one more first-party cookie, catertoo_ad_opt_out, which lasts 400 days, and removes the identifiers the ad tags had set. We also set one first-party cookie, catertoo_signup_source, on our marketing site, help center and signup page. It remembers how you first arrived and how you most recently arrived from a campaign or another website: the campaign tags in the link, the referring site's domain, the page you landed on and any ad click identifier. It lasts up to 180 days after your last visit from a campaign or another website, is saved with your account if you sign up and then removed from your browser, and is never sent to advertisers or any other third party. You can opt out of Google Analytics in any browser via browser-level tracking controls or Google's opt-out add-on at https://tools.google.com/dlpage/gaoptout.
Changes to This Policy
We may update this privacy policy as the service evolves. We will notify you of material changes by email or in-app notice before they take effect. The date at the top of this page reflects when the policy was last revised.
Contact
Questions, concerns, or requests relating to your privacy? Contact our privacy team at privacy@catertoo.com.