Privacy Policy

From Diners

When you place an order through a Vendor's Truq page, we collect:

• Name — so the Vendor can identify your order at pickup (optional for walk-up orders, required for catering requests).
• Phone number — so we can send you text message updates about your order status if you opt in, and so the Vendor can contact you about a catering request.
• Text message consent — if you opt in, a record of your consent, including when you gave it and which version of the consent wording you agreed to, and your preferred language for messages.
• Email address — for catering requests, so we can email you about your request (for example, when the Vendor approves or declines it and when your payment is received), and so Stripe can send your payment receipt.
• Order details — the items you ordered, order total (including any service fee, tax, and tip), timestamps, and the Vendor you ordered from. For catering requests, this also includes the requested pickup date and time, and any headcount and note you provide. For walk-up orders, this also includes the location the Vendor has set for its truck or cart at the time of the order.
• Ratings — if you rate an order, your rating and any comment you write.

Payment information:Payments are processed by Stripe, Inc. Your payment details, such as card or bank account numbers, are collected by Stripe (and, for methods such as digital wallets, Link, or Cash App Pay, by the provider of that method) and are never stored on Truq's servers. Stripe's handling of your payment data is governed by its own privacy policy, available at stripe.com/privacy (opens in a new tab).

You do not need to create an account to place an order.

From Vendors

When you sign up as a Vendor, we collect:

• Account information — your name and email address, collected and managed through our authentication provider, Clerk.
• Business information — your business name, menu content, pricing, and operating details you provide when setting up your storefront.
• Team information— the email addresses of people you invite to your team, their role (Owner, Manager, or Employee), and each team member's email-alert settings.
• Menu files — if you use menu import, the photos or PDF files of your menu that you upload. We send these to a third-party AI service provider, which processes them to create a draft menu for you to review and edit before it is added to your menu. Only the files you upload are sent; no Diner information is sent to this provider.
• Payment onboarding information — to receive payouts, you complete onboarding with Stripe. Identity verification details and banking information are collected directly by Stripe, not by Truq.
• Usage information — basic records of your activity on the platform, such as orders received and account settings.

About Events

Vendors can use Truq to plan and run events they serve, such as weddings, corporate events, private parties, and festivals. When a Vendor sets up an event, the Vendor enters, and we store:

• Event details— the event's name, type, date and time, the truck or cart serving it, and an optional expected headcount.
• Event location — optionally, a location name, street address, and map coordinates.
• Host contact information— optionally, the name, phone number, and email address of the event's host.
• Notes — any notes the Vendor writes about the event.

We use this information so the Vendor and its team can plan, staff, and run the event. The event location, host contact information, and notes are visible to the Vendor running the event and its team members, and are never shown to guests ordering at the event. Guests who order using the event's QR code see the event's name and time. If you are an event host, the Vendor you are working with provided your information to us.

When a Diner orders using an event's QR code, the order is tagged to that event so the Vendor can view the event's orders and include them in its event sales reports. Event reports do not include host contact information or Diner names, phone numbers, or email addresses.

Automatically Collected Information

We currently do not use analytics or advertising trackers on Diner-facing ordering pages. We use only the cookies and similar technologies strictly necessary for the Services to function, such as maintaining your cart and session during checkout. Our servers may log standard technical information (such as IP address and browser type) for security and troubleshooting purposes.

If we introduce analytics tools in the future, we will update this policy before doing so.

We use the information we collect to:

• Process and fulfill orders, including routing your order to the correct Vendor.
• Send transactional messages about your order: text messages if you opt in (for example, confirmation and ready-for-pickup notifications), and emails about catering requests.
• Send Vendors and their team members email alerts about new orders and catering activity, according to each team member's alert settings, and send invitation emails to people a Vendor invites to its team.
• Create a draft menu from menu files a Vendor uploads.
• Let Vendors plan and run events, and tag orders placed using an event's QR code to that event for the Vendor's reports.
• Provide, maintain, and improve the platform for Vendors.
• Facilitate payments and payouts through Stripe.
• Prevent fraud, enforce our terms, and protect the security of the Services.
• Comply with legal, tax, and accounting obligations.

We do not sell your personal information. We do not use Diner phone numbers for marketing. Text messages from Truq are limited to updates about orders you have placed.

If you provide your phone number and check the consent box at checkout, you consent to receive transactional text messages (SMS/MMS) about your order. You may receive up to 3 messages per order placed. Consent to receive text messages is not a condition of purchase. Message and data rates may apply depending on your mobile carrier and plan. Truq is not responsible for carrier charges. Your phone number and text-messaging opt-in data and consent will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. We will never send you marketing or promotional text messages — all messages relate solely to orders you have placed.

You may opt out of text messages at any time by replying STOP. Note that opting out may prevent you from receiving order status updates, but it will not affect the order itself. Reply HELP or contact us at support@gotruq.com for assistance.

Mobile information. Your phone number and text-messaging opt-in data and consent will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. The sharing described in this policy excludes text-messaging originator opt-in data and consent, except that we share this information with our SMS delivery provider, and its aggregators and carriers, solely as necessary to deliver messages.

We share information only in the following circumstances:

With the Vendor you order from. When you place an order, we share your name, phone number, email address (for catering requests), and order details with that Vendor so they can prepare and hand off your order. Vendors are permitted to use this information solely to fulfill your order. Vendors are not given access to Diner contact information for marketing purposes. Sales reports and data exports available to Vendors do not include your name, phone number, or email address.

With service providers. We rely on third-party providers to operate the Services, including Stripe (payment processing), Clerk (Vendor authentication), our database, web hosting, and file storage providers, our SMS and email delivery providers, and an AI service provider (which processes menu files Vendors upload for menu import). These providers process information only as needed to provide their services to us.

For legal reasons. We may disclose information if required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.

In a business transfer. If Truq is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify you of any change in ownership or in how your information is handled.

We retain order records, including associated Diner information, for as long as reasonably necessary to fulfill the purposes described in this policy, including for tax, accounting, dispute resolution, and legal compliance purposes. Vendor account information is retained for as long as the account remains active and for a reasonable period afterward as required by law.

Event location (including address and map coordinates), host contact information, and event notes are deleted 90 days after an event is completed or canceled. The event's name, type, dates, and sales totals are kept for the Vendor's records. Backup copies are removed within 7 days.

You may request deletion of your personal information as described in Section 6.

Depending on where you live, you may have rights regarding your personal information, including the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information, subject to legal retention requirements.

To exercise any of these rights, contact us at support@gotruq.com. We will respond within a reasonable timeframe and may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising your privacy rights.

We take reasonable technical and organizational measures to protect personal information, including encryption of data in transit, access controls, and reliance on established infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@gotruq.com and we will delete it.

Vendors on Truq are independent businesses. Any information you provide directly to a Vendor outside of the Truq checkout flow (for example, in person at their truck or cart) is governed by that Vendor's own practices, not this policy.

We may update this policy from time to time. If we make material changes, we will update the effective date above and take reasonable steps to notify you, such as posting a notice on our website. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

If you have questions about this policy or our privacy practices, contact: