Privacy Policy

Last revised: April 13, 2026

Cornshake ("Cornshake," "we," "our," and/or "us") values the privacy of individuals who use our website at https://cornshake.com, our platform, mobile applications, and any related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, and disclose personal information. By using the Services, you agree to the practices described here. Your use of the Services is also subject to our Terms of Service.

1. Information We Collect

1.1 Information You Provide

Placing an Order. When you place an order with a Merchant through the Services, we collect your name, phone number, email address, delivery address, and any other information you provide, including order details, delivery instructions, and food allergies or sensitivities. If you are a member of a Merchant's loyalty program, we collect information you provide in connection with your membership. If you leave feedback for a Merchant, we collect the information you include in that feedback.

Creating an Account. When you register, we collect information necessary to set up and manage your account, such as your name, email address, phone number, and date of birth.

Merchants. If you are a Merchant or an employee of a Merchant, we collect information in connection with your use of the Services, including your name, email address, mailing address, phone number, business name and contact information, tax identification number, and banking and payment information.

Payment Information. When you make a payment through the Services, your credit card information, billing address, and other financial data ("Payment Information") is processed by our third-party payment processors (e.g., Clover). The processing of your Payment Information is governed by the payment processor's terms and privacy policy. We do not collect, store, or process your full Payment Information.

Communications. If you contact us directly, we collect the information you provide, such as your name, email address, phone number, and the content of your inquiry.

SMS Opt-In. When you opt in to text messaging, we collect your phone number and consent status.

Careers. If you apply for a job with us, we collect your contact information and the information you provide in your resume or application.

1.2 Information Collected Automatically

Device Information. We collect information about the device and software you use to access the Services, including IP address, browser type, operating system, and device identifiers.

Usage Information. We collect information about your interactions with the Services, including pages viewed, features used, actions taken, timestamps, and referring URLs.

Location Information. When you use the Services, we may collect your precise location if you grant permission through your device settings. We may also infer your general location from your IP address. We use location information to provide and improve the Services, including to facilitate order delivery.

Cookies and Similar Technologies. We and our third-party partners use cookies, pixel tags, and similar technologies to collect information. These technologies may collect information about your online activities over time and across different services. You can manage cookie preferences through your browser settings, though some features may not function properly without cookies.

1.3 Information from Third Parties

Merchants. If you place an order with a Merchant through the Services, we may receive information about your order history from that Merchant.

Partners. We may receive personal information from data or marketing partners and combine it with other information we have about you.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services, including fulfilling orders;
• Understand and analyze how you use the Services, and develop new products, services, and features;
• Communicate with you, provide updates, respond to inquiries, and provide customer support;
• Facilitate transactions and payments;
• Send marketing communications, including promotional and advertising materials that may be relevant to you;
• Personalize recommendations and your experience with the Services;
• Detect and prevent fraud, and respond to trust and safety issues;
• Comply with legal obligations, enforce our Terms of Service, and protect our legal rights; and
• For other purposes for which we provide notice at the time of collection.

3. How We Share Your Information

We do not sell your personal information. We share information only as described below.

3.1 Fulfilling Orders

When you place an order with a Merchant, we share your information (such as name, address, phone number, allergies, and special instructions) with that Merchant. If delivery is involved, we may share your name, address, phone number, and location with the delivery provider.

3.2 Resolving Disputes

If you contact us about an issue with an order, we may share your information with the Merchant or delivery provider to attempt to resolve the issue.

3.3 Service Providers

We share information with vendors and service providers who assist in operating the Services, such as payment processors, hosting providers, email delivery services, and analytics tools. These providers receive only the information necessary to provide services to us and are contractually obligated to use it only for that purpose.

3.4 Loyalty Programs

If you participate in a Merchant's loyalty program powered by Cornshake, we share the information you provided when creating your account with that Merchant.

3.5 Marketing

With the exception of Merchants you choose to interact with, we do not rent, sell, or share personal information, including SMS opt-in information, with affiliates or third parties for their direct marketing purposes.

3.6 Analytics Partners

We may use analytics services such as Google Analytics to collect and process usage data. These services may collect information about your use of other websites, apps, and online resources.

3.7 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Cornshake, our users, or others.

3.8 Business Transfers

In connection with a merger, acquisition, sale of assets, or similar transaction, your information may be transferred to the acquiring entity. We will notify you of any such change.

3.9 With Your Consent

We may share your information for purposes not described here with your explicit consent.

3.10 Social Media Integrations

If you are a Merchant and choose to connect your Facebook Page or Instagram Business account to the Services, we collect and store your Facebook Page name, Page ID, Instagram username, and access tokens necessary to publish content on your behalf. We use this information solely to post content you authorize through the Services. You may disconnect your social media accounts at any time through the Services' channel settings. Upon disconnection, we delete your access tokens from our systems.

4. SMS and Mobile Messaging Privacy

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories described above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy.

• Account data is retained for the life of your account.
• Transaction records are retained for 7 years to meet tax and legal requirements.
• Usage data may be retained in aggregated or anonymized form indefinitely.

You may request account deletion by contacting team@cornshake.com. Following an account deletion request, we generally delete personal information within 90 days, except where retention is necessary for safety, security, fraud prevention, legal compliance, or resolving outstanding claims or disputes.

6. Your Choices and Rights

6.1 Account Information

You may update or correct your account information at any time by logging into your account or contacting team@cornshake.com.

6.2 Marketing Communications

You may opt out of marketing emails by clicking the unsubscribe link in any marketing email. You may opt out of SMS marketing by replying STOP to any message. You will continue to receive transactional and service-related communications. If you no longer wish to receive messages from a specific Merchant, opt out by following the instructions in that Merchant's messages or contacting the Merchant directly.

6.3 Location Information

You can prevent your device from sharing precise location information through your device's operating system settings. However, location is important to the Services, and without it, some functionality may be unavailable.

6.4 Cookies

You may manage cookies through your browser settings. Disabling cookies may limit functionality of the Services.

6.5 Do Not Track

There is no accepted standard for responding to Do Not Track signals. We do not currently respond to such signals.

6.6 Data Subject Rights

Depending on your jurisdiction, you may have rights including:

• Right to Know/Access - to confirm whether we process your personal information and to access it.
• Right to Delete - to request deletion of your personal information.
• Right to Correct - to request correction of inaccurate information.
• Right to Data Portability - to obtain a copy of your information in a portable format.
• Right to Opt-Out - to opt out of the sale of personal information (we do not sell personal information), targeted advertising, or certain profiling.
• Right to Appeal - to appeal our decision if we decline your request.

To submit a request, contact team@cornshake.com. We may need to verify your identity and place of residence before processing your request.

7. Additional Disclosures for California Residents

The California Consumer Privacy Act (as amended by the California Privacy Rights Act) requires businesses to disclose whether they sell or share personal data. We do not sell personal data. We may share personal data (in the form of identifiers and internet activity information) with third-party advertisers for purposes of targeting advertisements on non-Cornshake websites or services.

We disclose the following categories of personal data for business purposes: account information (including name); device identifiers; internet activity information; geolocation data; and in limited circumstances, information that may be protected characteristics under California or United States law (such as food allergies or sensitivities).

California residents have rights including the right to know, access, delete, and correct personal data, to opt out of sharing for advertising purposes, and not to be denied services for exercising these rights.

If you are a California resident under 18 with a registered account, you may request removal of content you posted. Note that removal does not ensure complete deletion if the content has been reposted by others.

8. Security

We use reasonable physical, technical, and administrative safeguards to protect your personal information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you learn that a child has provided us with personal information, contact us at team@cornshake.com and we will take steps to delete it.

10. International Users

The Services are hosted in the United States and intended for users in the United States. If you access the Services from outside the United States, you consent to the transfer and processing of your information in the United States.

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them with any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Material changes will be communicated through the Services or by email. The updated version is effective when posted. Continued use of the Services after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy, your personal information, or wish to exercise your data subject rights, contact us at:

Cornshake
team@cornshake.com
https://cornshake.com