Privacy Policy

AirCanteen is a marketplace that connects home chefs, delivery drivers, and customers within Australia. "We", "us", and "our" in this policy refer to AirCanteen and its operators. You can contact us at privacy@aircanteen.com.

• Account info: name, email, password hash, contact number, address, profile photo.
• Role-specific info: chef bios, food listings and photos (chefs); delivery vehicle and licence reference (drivers); delivery and billing addresses (customers).
• Order data: items ordered, totals, delivery address, timestamps, ratings and reviews you submit.
• Device and usage data: IP address, browser and device type, pages viewed, and approximate location used for delivery matching.
• Payment info: handled by Stripe — we do not store full card numbers. We retain a non-sensitive payment intent identifier to reconcile orders.

• To provide the service: account, listings, ordering, payment, delivery.
• To verify identity, prevent fraud, and protect platform safety.
• To send transactional emails (order confirmations, status updates).
• To improve the service via aggregate analytics where consented.
• To comply with legal obligations and respond to lawful requests.

The following third parties process your data on our behalf:

• Stripe — payment processing. Stripe's privacy policy.
• Cloudinary — image storage for food and profile photos.
• Google Maps — address autocomplete and delivery routing. Google's privacy policy.
• MongoDB Atlas — primary data store hosted in Australia.
• Vercel — application hosting and edge caching.

We use a small number of cookies and local-storage entries to keep you signed in, remember your cart, and run the checkout flow. Optional functional and analytics cookies require your consent and can be toggled via the cookie banner on first visit. You can change your choice any time by clearing browser site-data and reloading the page; an updated banner will appear.

You may, at any time:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for optional processing.
• Complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise a right, email privacy@aircanteen.com with the words "Privacy request" in the subject. We respond within 30 days.

Account, order, and payment records are retained for seven years after account closure to comply with Australian tax and consumer-law obligations. Marketing preferences are deleted on request. Aggregate analytics are de-identified.

We use TLS in transit, hashed-password storage, encrypted database snapshots, and least-privilege access controls. No system is perfectly secure; we will notify you of a notifiable data breach in accordance with the OAIC notifiable breaches scheme.

AirCanteen is not directed at people under 16. If you believe a minor has created an account, contact privacy@aircanteen.com and we will remove the account.

We may update this policy. The "Effective" date above will change when we do. Material changes will be announced via email.

Privacy enquiries: privacy@aircanteen.com
General support: support@aircanteen.com