Food Web Privacy Policy

Food Web Privacy Policy

Food Web Asset Mapping Inc. ("Food Web," "we," "us"), a Nova Scotia corporation that operates as Food Web, explains in this policy what personal information we collect, why we use it, who we share it with, and the choices you have. It covers our websites, the kitchen marketplace, the food map, saved maps and embeds, the forum, the partner portal, the blog, and the developer tools and connected AI assistants (the "Platform").

We follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and other Canadian privacy law that applies to us. A short notice for residents of the United States is in section 13.

1. Who we are

Food Web Asset Mapping Inc. 268 Rolling Hills Drive Waverley, NS, Canada B2R 1B5

Privacy email: privacy@foodweb.network Support email: support@foodweb.network Phone: +1-902-718-7328

To delete an account, get a copy of your information, correct it, or ask us to change a map listing, use https://foodweb.network/privacy/delete-account. You can also email or phone us.

2. Information we collect

Account information. Name, email address, phone number, and the role you take on the Platform (renter, owner, partner, or another role).

Business and listing information. Business name, address, permits, insurance details, photos, prices, and availability that an owner or a partner provides.

Payment information. Card and bank-debit details are collected by Stripe. We store Stripe customer and payment identifiers, the amounts, taxes, fees, credits, deposits, and payout status. We do not store full card numbers or bank account numbers. If an owner joins Stripe Connect, Stripe collects that owner's identity and bank details. We do not receive those bank details.

Messages and content. Booking messages, forum posts, photos, map notes, listing text, and suggestions you submit.

Map and directory information. Names, addresses, websites, phone numbers, and descriptions of food businesses and places. Much of this comes from the business's own public website, from public geocoding sources, or from a person who suggests a listing. Many of those businesses have no Food Web account.

Technical data. IP address, browser and device type, pages viewed, and cookie identifiers. Approximate location may be inferred from an IP address. Map coordinates we store for a place come from the place's published location data or from a geocoder, not from tracking your device.

Developer access. API keys (we store a hash, not the key itself) and the record of an AI assistant you connect, including the fact of the connection and actions that change data.

Recruiting. Information you send if you apply for a job.

3. How we collect it

• From you, when you create an account, book, list a space, message someone, post on the forum, suggest a map listing, apply credits, contact us, or apply for a job.
• From your browser, through cookies and similar tools. Analytics and advertising cookies run only after you accept them.
• From service providers: Google, when you sign in with Google; Stripe, for payments; and the public sources described above for the map.

4. How we use it

We use personal information to:

• Provide the Platform, including bookings, the map, the forum, partner credits, and developer access
• Take payment, pay owners, refund, and keep tax records
• Send service messages about your account, bookings, and payouts
• Send marketing email only where we have consent or another legal basis, and you can unsubscribe
• Secure the Platform, prevent fraud, and enforce our Terms
• Improve the Platform, using aggregated or consented analytics
• Meet legal duties

We also use automated tools to read public business websites and propose a category for a map listing. Those tools do not decide the listing on their own, and they are aimed at public business pages, not at your private account.

5. Who we share it with

We do not sell your personal information.

We share it with the following providers, only for the purpose named:

• Stripe — payments, payouts, and Connect onboarding
• Google — account sign-in, Firebase Authentication, Firestore, file storage, and Google Analytics (Analytics only after cookie consent)
• Meta — an advertising pixel, only after cookie consent, loaded through Google Tag Manager
• Mapbox — map display
• Resend — email delivery
• Vercel — hosting the websites
• Supabase — the database for bookings, kitchens, the map, and related records
• Sanity — content, including this policy
• Sentry — error reports from the sites, so we can find and fix failures. A report can include the page, a technical identifier, and the error. We do not use these reports for advertising.

We also share what a booking requires with the other party to that booking (for example, a renter's name with the owner). Referral records are shared with the referrer only to the extent needed to show that a referral occurred.

We share information with authorities when the law requires it, and with a buyer of the business if Food Web is sold, in which case this policy still describes the use.

Connected AI assistants. If you connect an assistant (such as through our MCP sign-in), that assistant can read and act with your account, within your role. That can include your saved maps and, where your role allows, forum posts and map suggestions. You can revoke the connection or the API key at any time. Revoking it stops further access. It does not recall information the assistant already received.

Messages. Food Web staff can read messages on the Platform, including a conversation about a booking, to provide support, review a report, and protect the Platform.

6. The public map

A business may appear on the map without opening an account, because we publish information that is already public or that a user submitted. If that is your business, you may ask us to correct it or take it down at https://foodweb.network/privacy/delete-account. Public map pages can be embedded on other websites. An embed shows the listing, not your Food Web account.

7. Google sign-in

When you sign in with Google, we receive your email address and basic profile information (name and profile photo). We use it only to create and sign in to your account, to show your name inside the Platform, and to contact you about the account.

Our use of information from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to assess creditworthiness. People at Food Web see it only for security, to comply with law, or with your consent. We keep it for as long as your account exists, and you may ask us to delete it.

8. Cookies

We use cookies that are required to sign you in and keep the site secure. Analytics and advertising cookies run only after you choose Accept on the cookie banner. Reject leaves those cookies off. You can also control cookies in your browser. The banner choice is how you opt out of analytics and advertising cookies. The Cookie Policy lists each cookie.

9. How long we keep it, and deletion

You may ask us to delete your account at https://foodweb.network/privacy/delete-account. We confirm the request is yours, then:

• We delete your login, profile, private messages, photos you uploaded, saved maps, map notes, API keys, and connected-assistant access.
• If you have no payment history, that is a full deletion of your personal information.
• If you have paid, been paid, or used credits, we keep the booking, payment, payout, deposit, credit, lease, dispute, and referral records. We also keep a private copy of your name and email so those records name a real person. We do not use that copy for marketing.
• A kitchen you alone own is archived. It is removed from public booking and the financial history is kept.
• Public forum posts stay up until you ask us to remove them.

We respond to a verified request within 30 days. We may extend once where the law allows, and we will tell you.

10. Your rights in Canada

Under PIPEDA you may ask to access the personal information we hold about you, correct it, withdraw consent where we rely on consent, and challenge our handling of it. You may also ask for deletion, subject to section 9. Email privacy@foodweb.network or use the delete-account page. We may need to confirm your identity before we act.

You may complain to the Office of the Privacy Commissioner of Canada.

11. Security

We use access controls, encryption in transit, and payment details collected by Stripe rather than stored by us. No method of storage or transmission is perfectly secure.

12. Children

The Platform is for people 18 and older. We do not knowingly collect personal information from children. If you believe we have, contact privacy@foodweb.network and we will delete it.

13. United States notice

This section is for residents of US states with a consumer privacy law, including California.

We do not sell personal information for money. We do not share personal information for cross-context behavioural advertising except through the advertising cookies in section 8, and only after you accept cookies. Rejecting cookies is an opt-out of that sharing. You may also opt out by submitting a request on the delete-account page.

You may ask us:

• What categories of personal information we collected about you
• To correct inaccurate personal information
• To delete personal information, subject to section 9

We will not discriminate against you for asking. An authorized agent may ask for you if you give written permission and we can verify your identity. We respond within 45 days. We may extend once where the law allows, and we will tell you.

These rights sit alongside the Canadian rights above. Information we hold is handled in Canada and by the providers in section 5, some of whom process it in the United States.

14. International transfers

We are in Canada. Our providers may process information in the United States and in other countries where they operate. We use providers that offer contractual protections appropriate to the transfer.

15. Links

The Platform links to other sites, including kitchens' own websites and embedded maps on third-party pages. Their privacy practices are their own.

16. Changes

We will post updates on this page and change the effective date. If you have an account, we will ask you to accept a material change before you continue. We may also email you.

17. Contact

Food Web Asset Mapping Inc. 268 Rolling Hills Drive, Waverley, NS, Canada B2R 1B5 Email: privacy@foodweb.network Phone: +1-902-718-7328