Privacy Policy

Effective date: November 1, 2026
Entity: SquareDrop LLC (“SquareDrop”, “we”, “us”), a Georgia limited liability company
Contact: [email protected]

1. Who this covers

This policy applies to people who use the SquareDrop website and app to order food for delivery or pickup in Cobb County, and to people who apply to drive with us or ask to bring a restaurant outside our area onto SquareDrop. If you drive with us, section 9 says what we hold about you. Restaurants we work with are covered by their agreement with us; this policy covers the contact details of the people who run a restaurant’s account.

2. What we collect

You give us:

• Account details: email address and a password. Passwords are stored only as a salted hash; we never see or keep the plain password.
• Profile: your name and phone number.
• Delivery addresses: street, unit, city, state and ZIP for addresses you save, and any drop-off instructions you add (such as a gate code or where to leave your order).
• Problem reports: if you use Report a problem on an order, what you write, the items you pick and any photos you attach.
• Driver applications and restaurant requests: if you apply to drive with us, or ask to join from a restaurant outside our delivery area, your name, email address, phone number and what you tell us (your vehicle and availability, or your restaurant's name and address), and, for a driver, whether you agreed to texts about your deliveries and when. We use them only to answer you and, if you drive with us, to pass texts between you and your customers.

Created as you use the app:

• Order history: what you ordered, from which restaurant, when, the amounts, and any special instructions you typed. Special instructions can include allergy or dietary details if you choose to add them. We treat them as part of your order: they go to the restaurant and, for a delivery, to our delivery partner and your driver (section 4), and we do not use them for anything else.
• Device location: if you allow it, your device’s location (to within about 100 meters) is used to show restaurants near you and, when you check out a pickup order, to tell you if you seem far from the restaurant (checked on your device, not sent to us). You can decline; the app still works if you enter an address.
• Notification token: if you allow notifications in the mobile app, we store a token your phone gives us so we can send you updates about your orders. You can turn notifications off at any time in your phone's settings.
• Geocoded coordinates: when you save an address we convert it to map coordinates (latitude/longitude) so delivery distance and fees can be calculated.

Button counts on our website. When you press one of the main buttons on squaredropga.com, such as Create your account, we add one to that day’s count for that button. The count records the page and, if the link you came by names where it was posted (for example “google”), that name. Nothing that identifies you goes with it: no cookie, no IP address and no device details.

Usage counts in the app. When the app is opened, a menu is viewed, an item is added to the cart, the app asks you to sign in, or checkout starts, we count it under a random number stored on your device. The count is not linked to your account, your name or your orders.

Cookies and storage on your device. We use cookies and your device’s storage only for what SquareDrop needs to work: to keep you signed in (on the website, in cookies that the page’s scripts cannot read; in the phone app, in your phone’s encrypted storage), to keep your cart, to remember settings such as how a restaurant’s tablet sorts its orders, and to hold the random number behind the usage counts above. None of it is used for advertising or to follow you to other websites. On the website version of the app, our payment processor’s script (Stripe) runs on every page, and the security check on our forms (Cloudflare) runs where a form uses it; each may store its own cookies or similar data in your browser to detect fraud and bots, under its own privacy policy.

We do NOT collect or store your card number. Card details are entered directly into our payment processor (Stripe) and handled by them. We keep only a Stripe reference token that lets us charge a card you have authorized and never the card number, expiry, or security code.

Calls and texts between your driver and you. When you place a delivery order, your driver may call you about that delivery through a SquareDrop phone number, so neither of you sees the other’s personal number. If you turn on texts (the box when you create your account, or the texts setting in your account), you and your driver can also text each other through that number. We record whether texts are on, when and where you turned them on, and when and how you turned them off. Through this relay we use your phone number only to connect these calls and texts, and we do not sell it or share it with third parties for their own marketing. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not sell, rent or share mobile phone numbers or text messaging consent with third parties or affiliates for marketing or promotional purposes; the only exception is the service providers that deliver our messages. You can reply STOP to any SquareDrop text, or tell us in a text to stop, and texts are turned off for you on every SquareDrop number; you can also turn the setting off at any time. See how you agree to these calls and texts and our SMS Terms.

Pickup orders are paid in person at the restaurant, so we process no payment for them at all.

3. Why we use it

• To create and run your account.
• To take, price, and fulfil your orders.
• To route a delivery to your address and let the restaurant and driver identify your order (your name, delivery address and drop-off instructions are shared with the driver; your name is shown to the restaurant so a pickup can be matched to you).
• To calculate delivery distance and fees.
• To send you occasional service updates if you have an account.
• To email you deals and offers, only if you turned that on when you signed up or in Profile. Turn it off there or with the unsubscribe link in any of those emails.
• To provide support and respond to you.
• To detect, prevent and address fraud, abuse, and technical problems.

We do not sell your personal information.

4. Who we share it with

We share the minimum needed with service providers who act on our behalf:

Each is bound to use the data only to provide its service to us, with two exceptions: Google may also keep and use what it receives through Google Maps (what you type in an address field, your IP address and map coordinates) to improve its own products, under Google’s Privacy Policy; and Cloudflare may use the security check’s technical data to improve that check. We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users. If SquareDrop is ever involved in a merger or sale, information may transfer as part of that transaction.

5. How long we keep it

We keep your account information while your account is open, as needed to run the service and resolve disputes.

If you report a problem with an order, what you write and any photos you attach are deleted 120 days after you send the report, or sooner if you delete your account.

A driver application we decline, or one we have not acted on, is deleted six months after you send it. A request from a restaurant outside our area is deleted six months after it was last sent.

When you delete your account, your personal information is wiped. Your name, email address, phone number, password, saved addresses, saved cards (also removed from Stripe), favorites and the text of your ratings are deleted. We do not keep them, and we never sell your information, before or after you delete. The one exception is delivery proof: the drop-off location, photos and times the driver’s app records at your door, any notes you added to the items in those orders, and how far from your address and how long after pickup the drop-off was, are kept for 120 days after you delete your account, the time a card payment can still be disputed, and are then deleted.

Two things remain, and neither identifies you:

• An anonymous record of each past order: what was ordered, the amounts and tax, and the city and ZIP code it went to, to meet tax and accounting obligations. It has no name, email, phone number or street address.
• A one-way fingerprint of your email address, never the address itself. It cannot be read back as your email; it can only tell us that an address someone gives us matches. We use it for two things only: so a one-time offer, such as a first-delivery discount, cannot be claimed again with the same address; and, for 120 days after you delete your account, so that address is not sent marketing email unless it is used to sign up again with deals and offers turned on.

Our payment processor and delivery dispatcher keep their own records of payments and deliveries they handled, including the dispatcher’s copy of the drop-off photos, under their own policies and legal obligations.

6. How we protect it

Passwords are hashed. Access to your account requires authentication. Data in transit is encrypted (HTTPS). We limit staff access to what’s needed to operate the service. No system is perfectly secure, so we cannot guarantee absolute security.

7. Your choices and rights

• Access / correction: you can view and edit your profile and addresses in the app.
• Deletion: delete your account yourself in the app, under Profile, Your Data & Account Deletion. It takes effect right away (you cannot delete it while an order is in progress). Section 5 says what is wiped.
• A copy of your data: in the same place, Email me my data sends a copy of everything we hold about you to the email address on your account.
• Location: you can turn off location permission in your device settings at any time.
• Email from us: every marketing email we send, such as deals and offers, has an unsubscribe link, and you can also email [email protected] to be taken off. Emails about your account and your orders, such as receipts and sign-in codes, are not marketing and have no unsubscribe link. We do not send marketing text messages.

Do Not Track. We do not track you across other websites or apps, so we do not respond differently to Do Not Track signals. No other company collects information about your activity across websites through SquareDrop.

Depending on where you live you may have additional rights, such as the right to access, delete, or port your data, or to object to certain processing. Email [email protected] and we will respond as required by applicable law.

8. Children

SquareDrop is not directed to children under 13, and we do not knowingly collect their information.

9. If you drive with us

Drivers are independent contractors who deliver SquareDrop orders through Shipday, the dispatch service we use. When you drive with us, we hold:

• Your application: what section 2 lists, including whether you agreed to texts, when, and the wording you agreed to.
• From Shipday: your name, email address, phone number and profile photo, and for each delivery you carry its times, drop-off location and drop-off photos.
• Your pay: what each delivery paid you and your weekly payouts.

The customer whose order you carry sees your first name and photo and can follow the delivery on Shipday’s tracking page; calls and texts between you go through a SquareDrop number, so neither of you sees the other’s number. To pay you, we open a Stripe account in your name with your name and email address; Stripe asks you directly for your identity and bank details, and we never see them. The providers in section 4 handle your details the same way as a customer’s.

We keep these while you drive with us. When you stop, email [email protected] and we will delete them, except records of what we paid you, which we keep as long as tax law requires, and the delivery proof kept with each customer’s order, which section 5 covers. You can reply STOP to any SquareDrop text to stop texts at any time.

10. Changes

We may update this policy. Material changes will be posted here with a new effective date, and where appropriate we’ll notify you in the app.

11. Contact

Questions about this policy or your data: [email protected]