Privacy Policy

Last updated: October 18, 2026

This policy explains what Jason Calavaza, doing business as Online Kitchen ("we"), collects through onlinekitchen.fyi, truck ordering pages, and the kitchen portal, and how we use it. We are based in Phoenix, Arizona, and the Service is offered only in the United States. Our servers are run by Hetzner in Germany, so the information described below is stored and processed there. It is not directed at people in the European Union, the United Kingdom, or other countries outside the U.S.

What we collect

• Trucks: owner name, email, business name, Instagram handle (optional), menu, photos, locations, hours, a hashed password and staff PINs, and order history.
• Truck business records (Business tools): crew names, hours worked and pay rates; event, cost, sales tax and maintenance records; and documents the Truck uploads, such as permits and insurance certificates.
• Customers: the name, notes and allergy notes you type at checkout and the items you order. Your browser keeps a list of your recent orders so you can check their status. We also keep a scrambled (hashed) code for your device, which limits unpaid orders and lets the Truck see that you are a returning customer and your usual request. It does not reveal who you are.
• Group orders: each person's name, items and allergy notes, so the Truck can make and label each order.
• Punch cards: a random code kept on your phone (we store only a scrambled copy) and your stamp count. If you choose to save your card by email, we keep that email to send you the link.
• Following a Truck: your email and the locations you pick. Nothing is sent until you confirm, and every email has an unsubscribe link.
• Feedback: a thumbs up or down after pickup, with an optional reason or comment. Trucks see it without your name.
• Catering: the host's name, email and phone, the event date, time, address and guest count, menu choices and notes. The Truck keeps these in its client list and may add its own notes, such as a gate code.
• Subscriptions: Pro billing is handled by Stripe. We never see or store full card numbers.
• Online order payments: when a Truck takes card payments, you pay through Stripe directly to that Truck's Stripe account. We never see or store card numbers.
• Text messages: if you choose "Text me when it's ready," we keep your phone number only until that order is closed and send texts only about that order. Truck owners who turn on alerts give us their own number for new-order texts. Reply STOP to any text to opt out. We do not sell or share mobile numbers or text-message consent with third parties for marketing.
• Technical: IP address and basic request logs, used for security and to keep the Service running. We do not use advertising trackers.

How we use it

To run ordering pages, catering and the kitchen portal, send account emails (activation, password resets, security notices), order, catering and follow emails, the Truck's daily summary and reminders, send the texts you asked for, prevent fraud and abuse, and bill Pro subscriptions. We do not sell or rent personal information, and we do not share it for targeted advertising.

Who we share it with

• The Truck you order from, or book catering with, sees your name, items, notes and allergy notes (and for catering, your contact and event details) so it can serve you. Each Truck handles that information under its own practices.
• If a Truck shares its vendor packet link, the event organizer it sends it to can see the documents the Truck chose to include.
• Service providers that help us run the Service: Hetzner (servers), Resend (email), Stripe (billing and card payments), Twilio (text messages), Anthropic and OpenAI (the AI that reads photos, labels and receipts, turns recordings into text, and writes drafts; they receive only the photo, recording or words you choose, to give you the result, and we don't keep photos or recordings after they're read unless you save a receipt), and Open-Meteo (weather, which receives only the Truck's city, ZIP code or map location, never customer information). They may use it only to provide their services.
• Authorities or others when the law requires it, or to protect people, the Service, or our rights.
• A buyer or successor if the business is sold or merged, under this policy.

How long we keep it

Truck data is kept while the account is open. Deleting an account removes its page, menu, photos, orders, and settings. Customer phone numbers are removed when the order closes. After about 13 months, the customer's name and notes are cleared from old orders, keeping only the items and totals for the Truck's sales history. Backups are kept for up to 14 days and then overwritten.

Security and data breaches

We use encrypted connections (HTTPS), hashed passwords, and limited access to protect information. No system is perfectly secure. If a breach affects your personal information, we will notify affected people as Arizona law requires, within 45 days of determining a breach occurred, and if more than 1,000 Arizona residents are affected we will also notify the Arizona Attorney General and the national consumer reporting agencies.

Children

The Service is not meant for children under 13, and we do not knowingly collect their information. If you believe a child under 13 has given us information, email us and we will delete it.

Your choices

Trucks can edit their details or delete their account in Settings. Customers can ask the Truck, or email us, to remove an order record. Residents of some U.S. states may have extra privacy rights; email us and we will respond as the law in your state requires.

Changes

We may update this policy. If a change is significant, we will post it here and tell Trucks by email or in the kitchen portal.

Contact

Jason Calavaza (Online Kitchen) · Phoenix, Arizona · hello@onlinekitchen.fyi