CurbTable Privacy Notice

1. Information CurbTable collects

• Account information, including name, email address, phone number, account role, business name, account identifiers, and verification records.
• Marketplace information, including food-truck, property, event, menu, service-area, availability, and pricing details.
• Request and booking information, including dates, times, city, exact service address when needed, guest count, budget, cuisine, dietary needs, notes, vendor responses, private in-site messages, attendee ticket orders, check-in status, and status history.
• Directory-claim information, including the public listing selected, claimed business relationship, review note, signed-in account, and review history. CurbTable does not request identity documents or banking information for this claim form.
• Vendor operational-compliance documents, including the document type, file, expiration date, upload status, and manual review history.
• Contact-form information, including your name, email address, selected topic, message, reference number, delivery status, and submission time.
• Security and technical information needed to operate the service, such as sign-in session data, IP address, device or browser details, timestamps, and abuse-prevention records.

2. How information is used

• Authenticate accounts and enforce role and ownership permissions.
• Publish approved marketplace listings and show current host-submitted availability.
• Create and manage bookings, catering requests, tickets, and RSVPs.
• Prevent double booking, fraud, abuse, and security incidents.
• Communicate about accounts, requests, support, and safety.
• Maintain, troubleshoot, and improve CurbTable.

3. What other users can see

Approved business listings and general availability may be public. Published location and event openings, including the street address, service date and time, audience details, and description, are available to eligible signed-in food vendors before they request a date.

Approved customer food-request posts show event and service details to eligible vendors but exclude the customer’s identity, email, phone number, and exact address. When a customer selects a vendor, the targeted catering request continues to hide the customer’s identity, contact information, and exact event address until the booking is confirmed and its payment is verified through CurbTable. In Stripe test mode, that means a verified successful test payment. A location or event request shares the vendor’s name, cuisine, and email with the responsible host. Authorized CurbTable administrators may access these records.

Event organizers can see an attendee’s display name, ticket quantity, confirmation state, and check-in count for their own events. They do not receive the attendee’s email or payment credentials from the ticket dashboard. Ticket QR codes are private, signed, single-use admission credentials and are available only to the ticket buyer.

Private food-request messages are available only to the customer who created the request and the vendor account that sent the approved offer. The in-product administrator dashboard has no general message access. Contact details, external links, social handles, and exact addresses are blocked from these messages.

4. Vendor compliance-document portal

CurbTable accepts only operational compliance documents through the vendor portal. Files must be PDF, JPG, or PNG format and no larger than 8 MB each. Uploaded files are private to the submitting account owner and authorized CurbTable administrators, who review them manually. They are not published or shown to customers, hosts, or other vendors.

CurbTable does not currently perform automated malware scanning on uploaded files. Do not upload government identification, Social Security numbers, tax records, banking information, payment-card data, medical information, or employee records. The portal is not designed to receive or protect those categories of sensitive information.

When an account owner deletes a document, CurbTable removes the file bytes from active storage. CurbTable may retain limited review metadata, such as the document category, timestamps, status, reviewer, and review notes, when reasonably needed for security, fraud prevention, disputes, or audit records. A manual review or verified status is not a legal guarantee that a document is authentic, complete, current, or legally sufficient.

5. Service providers and other disclosures

CurbTable shares information with hosting, database, security, and transactional email providers only as needed to operate the service. Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, investigate fraud or abuse, protect safety and rights, or complete a business transfer. CurbTable does not currently sell personal data or use personal data for targeted advertising. Live payment processing is not enabled. In an explicitly labeled Stripe test flow, CurbTable sends the signed-in email, business name, booking identifiers, and server-calculated test amount to Stripe. Stripe—not CurbTable—collects test card and payout onboarding details. CurbTable stores only Stripe object identifiers, onboarding readiness, and test payment status, not full card or bank account numbers.

Public food-truck and property directory entries may summarize business information from the linked official website or trade directory. These entries are labeled unclaimed until a manual owner claim is approved. An approved claim means only that CurbTable accepted the claimed relationship; it is not permit verification and does not make the listing bookable.

6. Essential sign-in technology

CurbTable uses essential cookies or similar session tokens to keep users signed in, protect accounts, and prevent abuse. CurbTable does not currently use advertising cookies. A session generally expires after 30 days of inactivity, but continued use may extend it. Signing out ends the current session.

7. Retention and security

CurbTable keeps information for as long as reasonably necessary to operate accounts and bookings, answer support and partnership messages, maintain security and business records, resolve disputes, and meet legal obligations. Contact messages and delivery records are deleted or de-identified when they are no longer reasonably needed for those purposes. CurbTable uses authenticated identities, server-side authorization, secure session settings, access controls, and database safeguards, but no system can guarantee absolute security.

8. Your privacy choices

You may ask CurbTable to confirm whether it processes your personal data and request access, correction, deletion, or a portable copy where applicable. You may also ask about or object to a use of your data. Use the policy contact below; CurbTable may verify your identity before acting. If a request is denied, reply with “Privacy appeal” for a new review. CurbTable will not discriminate against a user for exercising an applicable privacy right.

9. Children

CurbTable is intended for adults and businesses and is not directed to anyone under 18. People under 18 may not create an account or submit information through CurbTable. A parent or guardian who believes a minor submitted information may use the policy contact below.

10. Changes to this notice

CurbTable may update this notice when its services or legal obligations change. The effective date at the top identifies the current version; material changes will be presented through the site or account notice.