Privacy Policy

Food Truck Spot ("we", "us") operates the Food Truck Spot marketplace, where visitors discover food trucks nearby and order from them for pickup. We act as the data controller for the data described below.

Our legal entity registration is being completed. Until the registration details are published on our Legal notice page, please send all privacy questions and requests through our contact form, which reaches the people responsible for privacy at Food Truck Spot.

• Account data — when you sign in with Google we receive your email address, name and profile picture, and we store a display name, optional phone number and currency preference.
• Order data — the trucks and items you order, amounts, currency, pickup code, order status, notes you add and any promo code used.
• Content you create — reviews and ratings, saved (favourite) trucks, feature requests and votes, and messages you send through the contact form.
• Vendor data — if you register a food truck: truck details, contact phone, photos and the verification documents you upload for review.
• Location — your device location if you allow your browser to share it, used only in your browser to centre the map. Separately, and only if you opt in, we check the country associated with your IP address to pick a default display currency.
• Consent records — the date, category and source of each cookie or location-currency choice you make, so we can demonstrate consent.
• Technical data — data needed to serve pages securely, such as your IP address in server logs.

• Providing the service (accounts, orders, pickup codes, order emails, vendor dashboards) — performance of a contract with you.
• Payments — performance of a contract; card details are handled by our payment provider, never by us.
• Vendor verification and moderation — legitimate interest in keeping the marketplace safe and trustworthy, and compliance with legal obligations.
• Optional cookies, analytics and marketing, and IP-based currency detection — your consent, which you can withdraw at any time on the Privacy settings page.
• Accounting and dispute handling — legal obligation and legitimate interest.

We do not sell your personal data. We share it only with service providers that help us run the platform, acting on our instructions:

• the food truck you order from, which receives the order details needed to prepare it;
• our hosting, database, authentication and storage provider;
• our payment provider, for processing card payments and vendor subscriptions;
• our email provider, for order confirmations and service notifications;
• Google, for map display and for sign-in when you choose it;
• our AI provider, when a vendor uses the menu-photo scanner on their own menu image.

Some providers may process data outside the European Economic Area. Where that happens we rely on the safeguards offered by those providers, such as EU Standard Contractual Clauses.

• Account and profile data: while your account exists.
• Orders and payment records: as long as needed for accounting and tax obligations.
• Vendor verification documents: while the truck is listed, then archived per our review needs.
• Consent records: kept as proof of consent for as long as required to demonstrate compliance.
• Contact messages: until the request is resolved and any follow-up period ends.

If you are in the EU/EEA or UK you can request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting processing already carried out.

The quickest way to exercise these rights is the Privacy settings page, where you can download a copy of your data and request deletion of your account. You may also lodge a complaint with your local supervisory authority (in France, the CNIL).

Access to data is restricted by row-level security rules so that you can only reach your own records, vendors only their truck's records, and administrators only what is needed to review and moderate the marketplace. Verification documents are stored in private storage and shared only through short-lived links with reviewing administrators.

The service is not directed at children under 16. We do not knowingly create accounts for them; contact us if you believe a child has provided us with personal data.

We may update this policy as the service evolves. The revision date shown at the top of this page reflects the latest version, and material changes will be highlighted in the app.