Data Governance & Privacy Policy

Corpolicious collects minimal, essential telemetry required to process your requisition and route couriers to your desk or residence:

• Identification Telemetry: Name, corporate entity (optional), and contact phone number.
• Logistics Data: Physical delivery address, landmark data, and area coordinates.
• Order History: Portfolio assets selected, order frequency, and delivery timestamps.
• Payment Verification Data: Screenshot images submitted as proof of direct bank/wallet transfer (retained solely for order verification and dispute resolution — see Section 2).

We do not collect, store, or process debit/credit card numbers or CVVs on our servers. All digital settlements occur off-platform via direct, encrypted bank-to-bank Raast rails or physical cash clearance at handover. Payment proof screenshots may contain partial account/transaction details visible in the image itself; these are stored securely and accessed only by authorized personnel for verification purposes.

Your data is utilized strictly for:

• Fulfilling live kitchen orders and dispatching delivery personnel.
• Verifying payment and providing real-time order status telemetry and receipt/invoice generation.
• Direct customer liaison regarding order modifications or service updates.

We do not sell, rent, or monetize client data. Data is shared exclusively with necessary operational partners:

• Logistics Partners: Courier services (e.g., Bykea, internal riders) for delivery routing.
• Infrastructure Hosts: Secure database and hosting providers (Supabase / Vercel) operating under strict encryption protocols.

Client profile and order data is retained for the duration of an active account relationship. Where required for accounting, tax, or legal-compliance purposes, transaction records may be retained beyond a deletion request as required by applicable law, even after a profile deletion request has otherwise been honored.

Clients may request complete eradication of their historical customer profile and address records from our database at any time by contacting hey@corpolicious.com, subject to the retention carve-out in Section 5.

Questions regarding this policy may be directed to hey@corpolicious.com.