Privacy Policy

// We collect what we need to run the product. Nothing for ads.

1. What we collect

• Account info you give us — name, email, phone, business name, and the profile details you publish.
• Bookings and messages on the platform between venues and trucks.
• Basic technical data — IP address, browser type, the HopRoute pages you visit. Used for security and to fix bugs.

We don't collect payment card information, because HopRoute is currently freeware and doesn't process payments. We don't collect health, biometric, or government-ID information.

2. What we do with it

• Run the product — deliver booking confirmations, reminders, and sign-in links.
• Show your public profile if you opted in.
• Prevent abuse (rate limits, fraud detection).
• Improve the service — aggregate, de-identified usage metrics.

We don't sell your data. We don't use it for advertising. We don't share it with data brokers.

3. Who else sees it

• Service providers we use to run HopRoute see the minimum required to do their job. Today that includes our database host, Resend for transactional email, and our application host. Each is bound by a data-processing agreement.
• Other HopRoute users see only what you choose to make public on your profile — and, if they book with you, the contact details necessary to coordinate the booking.
• Legal requests — we may disclose information if compelled by valid legal process. We'll push back on overbroad requests.

4. Email

We don't send marketing emails. You'll receive booking confirmations, reminders, and sign-in links for events you're a party to. Trucks can opt out of all email from the profile editor at hoproute.app/me/profile — note that opting out means you'll lose booking confirmations and reminders too. That's the trade.

5. Cookies

We use a session cookie to keep you signed in. We don't use analytics or advertising cookies.

6. Retention

We keep your account data while your account is active. Booking records persist until both parties have deleted their accounts, because each side may need them for their own bookkeeping. Logs are retained for up to 90 days.

7. Your rights

You can export your account data, correct it, or delete it at any time. Reply to any HopRoute email and we'll handle it within a reasonable window. If you're in a jurisdiction with specific rights (GDPR, CCPA, etc.), the same contact route applies.

8. Security

Passwords are hashed (we never see them in plaintext). Connections are encrypted in transit. We do our best to keep your data safe but no system is perfectly secure — if a breach affects you, we'll notify you as soon as practicable.

9. Children

HopRoute is for adults running food businesses. We don't knowingly collect information from anyone under 16.

10. Changes

We'll update this policy as the product grows. Material changes will be announced by email and on this page before they take effect.

11. Contact

Privacy questions or a request related to your data: reply to any HopRoute email.