CSRA Food Trucks, operated by Urban Dreamers Holding LLC ("us", "we", or "our"), operates the csrafoodtrucks.io website (the "Service"). CSRA Food Trucks is a freemium marketplace platform connecting food truck vendors, customers, and event organizers in the Central Savannah River Area. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
About Our Business
CSRA Food Trucks operates as a freemium marketplace platform. We provide free core functionality for all users while offering premium features and services through paid subscriptions and revenue-sharing arrangements. Our platform generates revenue through multiple streams including promoted listings, event booking fees, premium analytics subscriptions, and advertising.
Information Collection
We collect several different types of information for various purposes to provide and improve our Service to you.
Types of Data
We collect the following types of data:
Account & Profile Data
Email address (required for account creation and authentication)
Display name and profile information
Profile picture and uploaded photos
User type/role (foodie, truck owner, organizer, admin)
Phone number (optional, for SMS notifications with explicit consent)
Location data (optional, for location-based recommendations)
Timezone information
Dietary preferences and favorite foods
Social media handles (if provided)
Food Truck Business Information
Business name, description, and contact details
Location data (real-time and scheduled locations)
Operating hours and schedule
Menu information (items, prices, dietary information)
Business photos and menu photos
Social media links (Facebook, Instagram, Twitter)
Payment methods accepted (public information)
Event & Booking Data
Event details (name, description, date, time, location)
Event type and attendee count
Special requirements and dietary needs
Vendor selections and booth assignments
QR pack data for event check-in
Payment & Subscription Data
Payment information (processed by Stripe, not stored by us)
Subscription status and tier level
Transaction history
Billing information (processed by Stripe)
Social Media OAuth Data
OAuth access tokens for Facebook, Twitter, and Instagram (encrypted storage)
Platform usernames and account information
Auto-posting preferences
Review & Rating Data
Review content and ratings (1-5 stars)
Review photos
Helpful votes on reviews
Owner responses to reviews
Location & Tracking Data
Real-time food truck locations (if enabled by owner)
Location history for analytics
Check-in data (QR code scan locations and timestamps)
Geographic preferences for recommendations
Promo Code Data
Promo codes created by truck owners
Code redemption data and locations
Usage analytics and redemption rates
Usage Data
IP address (for security, analytics, and location approximation)
Browser type and version
Device information (type, screen size)
Pages visited and time spent
Search queries and filters used
Interaction data (clicks, favorites, check-ins)
Session data (login sessions, session duration)
Performance data (page load times, error logs)
Use of Data
We use your data to:
Provide and maintain the Service
Process payments and manage subscriptions (via Stripe)
Facilitate event bookings and manage commissions
Provide premium analytics and insights (for Pro subscribers)
Display promoted listings and featured placements
Manage social media auto-posting features (when enabled)
Track promo code usage and redemptions
Notify you about changes to our Service
Allow participation in interactive features
Send SMS notifications for bookings, events, and important updates (with your explicit consent)
Provide analysis for service improvement
Moderate content and enforce our Code of Conduct
Facilitate communication between Food Truck Owners and Event Organizers for bookings
Process and store photos uploaded by users with content moderation review
How We Generate Revenue
CSRA Food Trucks operates as a freemium platform. Core features are free for all users, while we generate revenue through the following streams:
Promoted Listings & Featured Placements: Food truck owners can pay for enhanced visibility, featured placements, and "Truck of the Week" promotions
Event Booking Fees: We charge a commission on event bookings facilitated through the platform
Premium Analytics: Pro subscription ($15/month) for advanced analytics and insights
Advertising: Banner ads and sponsored content (with AdSense fallback)
Your personal data is not sold to third parties. We use data to provide services, process payments, and improve the platform. Payment information is processed securely by Stripe and not stored on our servers.
Payment Processing
We use Stripe, a PCI-DSS Level 1 compliant payment processor, to handle all payment transactions. When you make a payment or subscribe to premium features:
Payment information (credit card details) is processed directly by Stripe and never stored on our servers
We only store subscription status, transaction records, and the last 4 digits of your payment method (for display purposes)
Billing information is processed and stored by Stripe in compliance with PCI-DSS standards
You can manage your subscription and payment methods through Stripe's secure customer portal
For more information about how Stripe handles your payment data, please review Stripe's Privacy Policy.
Social Media Integration
If you choose to connect your social media accounts (Facebook, Twitter, Instagram) for auto-posting features:
We store OAuth access tokens in encrypted format to enable automatic posting
Tokens are used only to post content when you enable auto-posting features
You can disconnect your social media accounts at any time through your dashboard
We do not access or store your social media passwords
Auto-posting can be enabled/disabled in your account preferences
Social media platforms have their own privacy policies. Please review the privacy policies of Facebook, Twitter, and Instagram for information about how they handle your data.
Data Storage & Security
We implement industry-standard security measures to protect your data, including:
Data encryption at rest and in transit
Secure authentication and access controls
Payment processing through PCI-DSS compliant third-party processors
API security measures including rate limiting and input validation
Regular security assessments and updates
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Third-Party Service Providers
We use third-party service providers to operate our platform. These services have access to your data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. We work with service providers in the following categories:
Cloud Infrastructure & Database Services: For hosting, data storage, and database management
Payment Processors: For secure payment processing and subscription management
Mapping Services: For location services, geocoding, and directions
Email Services: For transactional emails and notifications
Analytics & Monitoring: For website analytics, error tracking, and performance monitoring
Caching Services: For performance optimization and rate limiting
Advertising Networks: For display advertising (when applicable)
All third-party service providers are required to maintain appropriate security measures and comply with applicable privacy laws. For more information about how specific service providers handle your data, please review their privacy policies. A list of our current service providers and their privacy policies is available upon request by contacting us at support@csrafoodtrucks.io.
Data Retention
We retain your data for different periods depending on the type of data and legal requirements:
User Accounts: Retained until account deletion
Food Truck Listings: Retained until listing removal or account deletion
Reviews: Retained until review deletion or account deletion
Event Bookings: Retained for business records (minimum 7 years for tax purposes)
Payment Records: Retained per Stripe requirements (minimum 7 years for tax compliance)
Analytics Data: Aggregated data retained indefinitely, individual event data retained for 2 years
Error Logs: Retained for 90 days
Access Logs: Retained for 30 days
Some data may be retained longer if required by law or for legitimate business purposes (e.g., payment records for tax compliance). You can request information about specific data retention periods by contacting us.
Data Export
You have the right to request a copy of your personal data in a portable format. To request your data export:
We share your data only in the following circumstances:
With Service Providers: We share data with third-party service providers (listed above) who perform services on our behalf, such as payment processing, email delivery, and analytics
For Legal Compliance: We may disclose data if required by law, court order, or government regulation
To Protect Rights: We may share data to protect our rights, property, or safety, or that of our users
Business Transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred as part of that transaction
With Your Consent: We may share data with your explicit consent for specific purposes
We do not sell your personal data to third parties. We do not share your data with advertisers except through aggregated, anonymized analytics or through our advertising partners (Google AdSense) when displaying ads, in which case standard advertising industry practices apply.
Content Moderation
To maintain a safe and positive community, we moderate user-generated content:
Review Moderation: All reviews are subject to approval before publication
Photo Moderation: All uploaded photos are reviewed for appropriateness and compliance with our guidelines
Content Flags: Users can report inappropriate content, which we review and take action on
Moderation Decisions: We track moderation decisions and reasons for transparency
Moderated content may be stored temporarily for review purposes. Rejected content is typically deleted within 30 days unless required for legal or safety reasons.
External Links
Our Service may contain links to external websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site.
We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children's Privacy
Our Service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.
If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children under 13 without verification of parental consent, we will take steps to remove that information from our servers.
Policy Changes
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
For material changes, we will notify you via email (if you have provided an email address) or through a prominent notice on our Service.