Privacy Policy
Effective September 23, 2026. Last updated October 25, 2026.
This Privacy Policy explains how CaterIt (“CaterIt,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our website and marketplace at www.caterit.io and caterit.io (the “Service”).
By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
This Policy works with our Terms of Service.
1. Who We Are
CaterIt is a New Jersey limited liability company that operates an online marketplace connecting buyers (offices, companies, and event organizers) with kitchens that fulfill catering orders for pickup or delivery, focused on the Philadelphia and South Jersey areas.
Contact: admin@caterit.io
2. Information We Collect
We collect information you provide, information created when you use the Service, and information from service providers that help us run the marketplace.
2.1 Information you provide
- Account details: name, email address, password (stored in hashed form), business or organization name (if provided), and phone number.
- Order and catering details: delivery or pickup address and instructions, event timing, headcount or quantity, menu selections, special requests, and notes for the kitchen.
- Kitchen / merchant profile information (if you operate a kitchen on CaterIt): business name, contact details, menu content, fulfillment preferences, and other information needed to list and fulfill orders.
- Communications: messages you send us (email, in-app, or other support channels) and information related to order confirmation or decline flows.
- Optional social login: if you sign in with Google OAuth (when available), we receive basic profile information the provider shares with us (such as name and email), subject to your settings with that provider.
2.2 Information collected automatically
- Usage and device data: IP address, browser type, device type, pages viewed, referring URLs, approximate location derived from IP, and timestamps of activity.
- Cookies and similar technologies: see Cookies.
2.3 Information from payment and communications providers
- Payments: When card checkout is enabled, buyers pay by card through Stripe. CaterIt does not store full card numbers on our servers. Stripe may provide us with payment status, last-four digits, card brand, billing details needed for the transaction, and related fraud/risk signals. Until card checkout is enabled, orders may be placed without a card charge.
- Merchant notifications: we use Twilio and other channels (voice, SMS, email, in-app, and fax where applicable) to confirm or decline orders. Those providers process phone numbers, call/SMS metadata, and message content needed to deliver notices.
3. How We Use Information
We use personal information to:
- Create and manage accounts (including email/password authentication via Better Auth, and optional Google OAuth when enabled).
- Process, confirm, fulfill, and support catering orders for pickup or delivery.
- Notify kitchens of new orders and collect accept/decline responses (including automated voice, SMS, email, in-app, and fax, with human follow-up when an order cannot be accepted).
- When card checkout is enabled, process payments through Stripe and facilitate kitchen payouts according to our marketplace practices and Stripe’s services.
- Charge and disclose our platform service fee as part of marketplace pricing.
- Communicate with you about orders, account activity, service updates, and support.
- Operate, secure, troubleshoot, and improve the Service (including analytics and fraud prevention).
- Comply with law, enforce our Terms of Service, and protect CaterIt, users, and the public.
- With your consent or as otherwise allowed by law, send marketing messages (you can opt out of marketing emails).
We do not sell your personal information.
4. Legal Bases and U.S. Privacy Rights (Brief)
CaterIt is U.S.-focused. Where a “legal basis” concept applies (for example if we process data of individuals in certain jurisdictions), we rely on: performance of a contract (providing the Service), legitimate interests (security, improvement, fraud prevention), consent (where required, such as optional marketing or certain cookies), and legal obligations.
California / CCPA-style notice
- We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are commonly defined under California law.
- Subject to applicable law, California residents may have rights to know/access, delete, and correct certain personal information, and to not be discriminated against for exercising privacy rights.
- To make a request, email admin@caterit.io. We may need to verify your identity before responding.
5. How We Share Information
We share personal information only as needed to run the marketplace and as described below:
- Kitchens / merchants
- Order details needed to accept, prepare, and fulfill (including pickup/delivery info and special requests).
- Buyers
- Order status and fulfillment-related updates.
- Stripe
- When card checkout is enabled: payment processing, fraud prevention, and kitchen payouts / fund transfers under Stripe’s services (including Stripe Connect or similar arrangements when used).
- Twilio
- Voice, SMS, and related messaging for order confirmation and merchant notifications.
- Hosting / infrastructure
- Hosting, storage, logging, and operation of the Service (for example Render and similar providers).
- Only if you choose Google OAuth (when available) for sign-in; subject to Google’s terms and your account settings.
- Email and communications tools
- Transactional email and support.
- Professional advisors / legal
- When reasonably necessary (accountants, lawyers, auditors).
- Authorities
- When required by law, legal process, or to protect rights and safety.
- Business transfers
- In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections.
We do not sell user data. Service providers are expected to use personal information only to perform services for us and as allowed by their agreements with us.
6. Payments and Fund Handling
When card checkout is enabled, buyers pay by card through Stripe. CaterIt does not store full card numbers. Until card checkout is enabled, the Service may allow orders to be placed without charging a card.
Depending on how marketplace payouts are configured (for example Stripe Connect versus other transfer arrangements), CaterIt or Stripe may hold or transfer funds as part of settling paid orders. Kitchen payout timing follows our marketplace practices and Stripe’s processing timelines.
7. Text Messages (SMS)
Program: CaterIt order notifications. Customers can opt in at sign-up or checkout to receive order-related texts (order confirmations, status updates and reminders). Kitchen partners can opt in at kitchen sign-up to receive order tickets and order status texts, including requests to reply ACCEPT or DECLINE.
When you check an SMS box, we record your mobile number, that you opted in (sms_consent), when (sms_consent_at), where, and the version of the consent wording you saw. Consent is optional: it is never required to create an account, place an order, or list a kitchen.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We share your number only with the messaging provider (Twilio) that delivers the texts you asked for.
Message frequency varies. Msg & data rates may apply. Reply STOP to any message to opt out at any time; you will get one confirmation and no further texts. Reply HELP for help, or contact us at admin@caterit.io.
8. Retention
We retain personal information for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, maintain security and fraud records, and meet legal, tax, and accounting requirements. Order and payment records are typically kept longer than marketing preferences. When retention is no longer required, we delete or de-identify information in accordance with our practices.
9. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information (including encrypted connections in transit and hashed passwords). No method of transmission or storage is completely secure. Please use a strong unique password and notify us promptly at admin@caterit.io if you suspect unauthorized access to your account.
10. Children’s Privacy
The Service is a B2B / office and event catering marketplace intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13 (or under 18 for marketplace use). If you believe we have collected information from someone under 18 in connection with the Service, contact us and we will take appropriate steps to delete it.
11. International Users
CaterIt is operated from the United States and primarily serves the Philadelphia / South Jersey region. If you access the Service from outside the U.S., you understand that your information may be processed in the United States, where privacy laws may differ from those in your location.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Effective date” / “Last updated” line will reflect the current version. Material changes may also be highlighted on the Service or by email when appropriate. Continued use of the Service after an update means you accept the revised Policy.
13. Contact Us
Questions about this Privacy Policy or privacy requests:
CaterIt (New Jersey limited liability company)
Email: admin@caterit.io
Website: https://www.caterit.io
Orders and accounts are also covered by the Terms of Service.