Privacy Policy

1. Introduction

Welcome to Mochipy!

Mochipy ("Mochipy," "we," "us," or "our") is an online marketplace operated by Cao-Tech LLC, a New Hampshire limited liability company.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you access our website, mobile applications, and related services (collectively, the "Services").

Mochipy connects customers with independent home bakers and other eligible food sellers. We are committed to protecting the privacy of our customers, bakers, and visitors.

By using Mochipy, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

We collect information necessary to operate our marketplace, process orders, verify sellers, and provide a safe and reliable experience.

Account Information

When you register or use Mochipy, we may collect:

• Your name or display name
• Email address
• Phone number, if provided
• Account identifiers and authentication information
• Profile preferences and account settings
• Information provided through Apple or other supported sign-in services

When you use Sign in with Apple, Apple may provide a private relay email address instead of your personal email address.

Order and Transaction Information

When you place or receive an order, we may collect:

• Products purchased and quantities
• Order totals and transaction history
• Requested pickup dates and times
• Order instructions and customer notes
• Allergen acknowledgments
• Order status, cancellations, and refund information
• Communications related to the transaction

Payment Information

Mochipy uses Stripe and its associated payment services to process payments and facilitate eligible seller payouts.

Payment card information is handled by Stripe. Mochipy does not intentionally collect or store complete payment card numbers or card security codes on its own servers.

We may retain payment identifiers, transaction amounts, payment statuses, and refund records for accounting, fraud prevention, and customer support.

Stripe's handling of personal information is governed by its own privacy practices.

Baker and Seller Information

If you register as a baker or seller, we may collect:

• Business or shop name
• Contact information
• Business descriptions and product listings
• Pickup location and address
• Applicable permits, registrations, and licensing documentation
• Food safety and compliance information
• Payment onboarding and payout account status
• Order fulfillment history
• Customer reviews and reported concerns

We use this information to administer seller accounts, support marketplace safety, and review applicable eligibility requirements.

Location Information

Mochipy allows customers to discover bakers based on their selected city, town, or approximate location.

If you grant location permission, we may process approximate geographic coordinates to identify nearby sellers.

You may also search by manually entering a city or town without enabling device location services.

We do not publicly display a baker's private residential pickup address through general marketplace searches.

Communications and Uploaded Content

We may collect information submitted through:

• Customer and baker messages
• Reviews and ratings
• Customer support requests
• Product photographs
• Reports and safety complaints
• Seller verification documents

Device and Technical Information

We may automatically collect certain technical information, including:

• IP address
• Browser and device type
• Operating system
• App version
• Diagnostic information
• Security and authentication events
• Error reports and service performance information
• Push notification tokens when notifications are enabled

3. How We Use Your Information

Cao-Tech LLC uses information collected through Mochipy to:

1. Create, maintain, and secure user accounts.
2. Connect customers with eligible local bakers.
3. Process orders, payments, refunds, and payouts.
4. Coordinate pickup and order fulfillment.
5. Review seller permits and applicable licensing requirements.
6. Deliver transactional notifications and service communications.
7. Respond to customer support requests.
8. Investigate fraud, abuse, prohibited activities, and food safety complaints.
9. Improve platform performance, accessibility, and user experience.
10. Comply with applicable legal, regulatory, and recordkeeping obligations.

We do not sell personal information to third-party data brokers.

We do not use sensitive seller verification documents for advertising.

4. How We Share Information

We share personal information only as reasonably necessary to operate the Services, fulfill transactions, protect users, or comply with applicable law.

Between Customers and Bakers

When a baker accepts a customer's order, we may share the customer information reasonably necessary to prepare and fulfill that order.

Customers receive the pickup information necessary to collect accepted orders.

A baker's private residential pickup address is not intended to appear in public listings or search results.

Service Providers

We use third-party technology providers that may process information on our behalf or as independent service providers, including:

• Supabase: Database, authentication, and file storage services.
• Cloudflare: Hosting, delivery, performance, and security services.
• Stripe: Payment processing, payment security, and seller payouts.
• Resend: Transactional email delivery.
• Apple: Supported account authentication and push notification services.

These providers process information according to their applicable contractual terms and privacy policies.

We may update our service providers as the platform evolves.

Legal and Safety Disclosures

We may disclose information when reasonably necessary to:

• Comply with applicable laws or valid legal processes.
• Respond to authorized regulatory requests.
• Investigate suspected fraud or illegal activity.
• Address food safety incidents.
• Protect the rights, property, and safety of customers, bakers, Cao-Tech LLC, or others.

5. Pickup Address Privacy

Protecting home bakers' residential privacy is an important part of Mochipy's design.

A baker's private pickup address is not publicly displayed in general search results, public shop profiles, or ordinary product listings.

Pickup addresses are disclosed to customers only when necessary for an accepted order and its fulfillment.

Customers must not use pickup information for unauthorized visits, harassment, solicitation, or any purpose unrelated to their order.

Although Mochipy uses access controls to protect pickup information, no internet-based service can guarantee absolute security.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services and meet legitimate business, security, accounting, and legal obligations.

Generally:

• Account information is retained while the account remains active.
• Order and payment records may be retained after account deletion when required for tax, accounting, dispute resolution, or legal compliance.
• Seller verification documentation is retained only as necessary for verification, compliance, or legitimate safety investigations.
• Security logs and technical records are retained according to operational and security requirements.

When information is no longer necessary, we take reasonable steps to delete, anonymize, or otherwise dispose of it securely.

7. Your Privacy Choices and Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain copies of certain personal information.

Mochipy provides account management features that may allow you to:

• Review and update your profile.
• Manage communication preferences.
• Request or download your account data.
• Request account deletion.
• Manage location and notification permissions through your device.

You may also submit privacy requests by contacting us at support@mochipy.com.

We may need to verify your identity before completing certain requests.

Account deletion does not necessarily require immediate deletion of information that we must retain for legal, financial, fraud prevention, or dispute resolution purposes.

We will not discriminate against users for exercising applicable privacy rights.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies for authentication, account sessions, security, preferences, and essential service functionality.

Where required by applicable law, we will provide additional notice or choices regarding nonessential tracking technologies.

You may manage certain cookie preferences through your browser settings, although disabling essential cookies may affect functionality.

9. Children's Privacy

Mochipy is not intended for children under the age of 13.

We do not knowingly collect personal information directly from children under 13.

Individuals registering as bakers or sellers must be at least 18 years old.

If we become aware that we have collected personal information from a child under 13 without appropriate authorization, we will take steps to delete it as required by applicable law.

Parents or guardians with concerns may contact us using the information below.

10. Data Security

Cao-Tech LLC implements reasonable administrative, technical, and organizational safeguards designed to protect information processed through Mochipy.

These measures may include:

• Encryption of information during transmission.
• Encryption of stored information where supported.
• Authentication and access controls.
• Restricted access to sensitive seller documents.
• Security logging and monitoring.
• Access controls for order and pickup information.

Despite these precautions, no electronic storage system or method of internet transmission is completely secure.

11. Third-Party Services and Links

Mochipy may contain links to third-party websites, payment services, or other external resources.

We are not responsible for the privacy practices or content of independently operated third-party services.

We encourage users to review the privacy policies of services they access.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, business operations, or legal requirements.

When changes are made, we will update the "Last Updated" date.

Where required by law, we will provide additional notice or obtain consent before materially changing how personal information is used.

13. Contact Us

For privacy questions, requests, or concerns, contact:

Cao-Tech LLC
Operator of Mochipy
New Hampshire, United States

Privacy and Customer Support: support@mochipy.com
Website: https://mochipy.com

For requests involving personal information, please include sufficient information for us to locate your account and verify your identity. Do not email payment card numbers, passwords, or other highly sensitive credentials.