← Back to home

Privacy Policy

Last updated: March 16, 2026

This Privacy Policy describes how River Platform ("River", "we", "us", or "our") collects, uses, and shares information about you when you use our mobile application, website, and related services (collectively, the "Services").

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information (name, email address, phone number)
  • Order information (items ordered, order history, delivery preferences)
  • Payment information (processed securely via Stripe; we do not store card numbers)
  • Device tokens for push notifications (when you grant permission)
  • Support communications

We also collect information automatically when you use the Services, including device identifiers, IP addresses, and usage data.

2. How We Use Your Information

We use the information we collect to:

  • Process and fulfil your orders
  • Send order status notifications via push, SMS, or email
  • Manage your loyalty program membership and points
  • Provide customer support
  • Improve our Services
  • Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We share your information only with:

  • The operator of the specific venue whose app you are using — to fulfil your orders
  • Stripe — for payment processing
  • Twilio — for SMS notifications (phone number only)
  • Firebase — for push notifications (device token only)
  • Law enforcement when required by law

4. Data Retention

We retain your account data as long as your account is active. Order history is retained for a minimum of 2 years for legal and accounting purposes. You may request deletion of your account and associated data at any time from the app's account settings.

5. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal information. To exercise these rights, contact us at privacy@kbgrabngo.ca.

6. Security

We use industry-standard security measures including encrypted storage, HTTPS transport, and JWT-based authentication with short-lived tokens. Passwords are hashed and never stored in plaintext.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email.

8. Contact

If you have questions about this Privacy Policy, contact us at privacy@kbgrabngo.ca.