Privacy Policy

Last updated: February 6, 2026

Introduction

GoDeli ("we", "our", or "us") operates the GoDeli platform, including our website and mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using GoDeli, you agree to the collection and use of information in accordance with this policy. This Privacy Policy should be read alongside our Terms & Conditions.

Information We Collect

Personal Information

When you create an account, we collect:

  • Name and email address
  • Phone number (for delivery coordination and verification)
  • Delivery addresses
  • Payment information (processed securely through Stripe; we do not store your full card details)
  • Profile photo (if provided)

Store Owner & Staff Information

If you register as a store owner or are invited as a staff member, we additionally collect:

  • Store name, address, and operating hours
  • Business-related information for payment processing (via Stripe Connect)
  • Product images and descriptions uploaded to your store
  • Team role and permission assignments

Location Data

We collect location data to:

  • Show nearby stores and their products
  • Calculate delivery distances and fees
  • Enable real-time delivery tracking
  • Help delivery drivers navigate to your location
  • Geocode store addresses for accurate map placement

Location access is only used when you actively use the app and can be disabled in your device settings at any time.

Camera Access

We request camera access to:

  • Scan product barcodes for quick product lookup (store owners)
  • Capture product images for inventory management (store owners)
  • Confirm deliveries (delivery drivers)

Camera data is processed locally on your device and is not stored or transmitted unless you explicitly choose to upload an image.

Push Notifications

With your permission, we send push notifications for:

  • Order status updates
  • Delivery driver arrival alerts
  • New order notifications (for store owners and drivers)

How We Use Your Information

We use the collected information to:

  • Process and fulfill your orders
  • Communicate with you about orders and deliveries
  • Verify your identity via phone or email
  • Process payments and payouts
  • Improve our services and user experience
  • Ensure the security of our platform
  • Enforce rate limits and prevent abuse of the platform
  • Comply with legal obligations

Data Sharing

We share your information only as necessary to provide our services:

  • Stores: Your name, delivery address, and order details are shared with the store fulfilling your order
  • Store staff: Team members with appropriate permissions can access order and customer data within their assigned store
  • Delivery drivers (GoGetters): Your name, phone number, and delivery address are shared for delivery purposes
  • Payment processors: Payment information is shared with Stripe for transaction processing

We do not sell your personal information to third parties.

Third-Party Services

Our platform integrates with the following third-party services, each of which has its own privacy policy governing the use of your data:

  • Stripe — Payment processing for customers, store owner payouts via Stripe Connect, and financial compliance
  • Google Sign-In — Authentication and account creation
  • Google Maps — Geocoding store addresses and displaying locations
  • Mapbox — Interactive map display for browsing nearby stores
  • Twilio — Phone number verification via SMS one-time codes
  • Firebase (Google) — Push notification delivery to mobile devices
  • Vercel Blob — Cloud storage for uploaded images (product photos, store logos, profile pictures)
  • Resend — Transactional email delivery (order confirmations, team invites, account notifications)
  • Upstash Redis — Rate limiting to protect the platform from abuse (no personal data is stored; only anonymized request counts by IP address)

We encourage you to review the privacy policies of these services to understand how they handle your data.

Cookies & Local Storage

We use cookies and browser local storage to:

  • Maintain your authentication session so you stay signed in
  • Remember your selected store when switching between multiple stores
  • Store your preferences (such as notification settings)

We do not use cookies for advertising or cross-site tracking. You can clear cookies and local storage through your browser settings, though this may require you to sign in again.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of data at rest in our databases
  • Secure authentication with session management
  • Role-based access controls for store team members
  • Rate limiting to prevent brute-force attacks
  • Regular security assessments and code reviews

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:

  • Account data: Retained until you request account deletion
  • Order history: Retained for a reasonable period to support customer service, dispute resolution, and legal compliance
  • Payment records: Retained as required by financial regulations and tax obligations
  • Uploaded images: Deleted when the associated product, store, or account is removed
  • Rate limiting data: Automatically expires after a short window (typically minutes to hours)

After account deletion, we may retain certain data in anonymized form for analytics or as required by law.

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Withdraw consent for optional data processing
  • Disable location and camera permissions in your device settings
  • Request a copy of your data in a portable format

To exercise any of these rights, please contact us at privacy@godeli.app.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you
  • Right to Delete: You may request the deletion of personal information we have collected, subject to certain legal exceptions
  • Right to Opt-Out of Sale: We do not sell your personal information to third parties. If this changes, we will provide an opt-out mechanism
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact us at privacy@godeli.app. We will respond to verifiable requests within 45 days.

International Users

GoDeli is based in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Service, you consent to the transfer of your information to the United States.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we may also notify you through the app or by email.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@godeli.app