Privacy

On this page

What we collect

Your account details: restaurant name, email, and a password stored only as a salted hash. Your delivery details: contact name, address and phone number. Your orders: the lines you type or upload, what was ordered, from which wholesalers, what it cost and how it was paid. Any messages you send us about an order.

We do not see or store your card number. Card payments are entered on Stripe’s own page.

What we use it for

To price and place your orders, take payment, deliver them, tell you what is happening with them, and show you what you spent and saved. We also look at orders in aggregate to improve product matching. We do not use your data for advertising.

Who sees it

The wholesalers that fill your order receive what they need to fill it: the items, and the delivery name, address and phone number. They do not see your other orders, what you pay elsewhere, or your savings.

We use a small number of service providers to run the product: Stripe for card payments, Resend for email, Vercel for hosting, MongoDB Atlas for the database, and Slack, where our own team handles orders. They process data only on our instructions. Some of them store data outside Canada, including in the United States.

We do not sell your data, and we do not share it with other restaurants. Your data is visible only to sign-ins on your own restaurant’s account and to the Buddee staff who handle orders.

Invoice uploads

If you upload a photo or PDF of an invoice, it is read by software we run ourselves to pull out the lines. It is not sent to a third-party AI service. You review and can correct everything it reads before it is saved.

Email

We email you about your account and your orders: confirmations, receipts, status changes and password resets. We send marketing email only if you have asked for it, and every such email has a way to stop.

How long we keep it

For as long as your account is open, and afterwards only as long as tax and accounting rules require us to keep order and payment records (six years, under Canadian tax law). Delete your account at buddeeio.com/delete-account, or ask us to, and we delete the rest.

Your choices

You can ask to see the personal information we hold about you, to have it corrected, or to have it deleted. Email orders@buddeeio.com and the person responsible for privacy at Buddee will answer. If you are not satisfied with the answer, you can contact the Office of the Privacy Commissioner of Canada.

Security

Connections to the site are encrypted. Passwords are hashed, sign-ins can be ended on every device at once, and access to order data inside Buddee is limited to the staff who handle orders. No system is perfectly secure; if a breach ever put your information at real risk, we would tell you.