1. Information We Collect
1.1 Personally Identifiable Information
- Full name
- University-issued email address
- Mobile phone number
- Campus ID or institutional ID
- Delivery address (residence hall or on-campus location)
1.2 Payment Information
- Payments are processed through Stripe. CARI does not store full payment card numbers.
1.3 Technical and Usage Information
- IP address and geolocation
- Device/browser details
- Session activity and page views
- Order history and diagnostics
1.4 Location Information
- With consent, GPS data is collected to optimize deliveries. You may revoke this in device settings.
1.5 Communications Metadata
- Support chats
- Reviews or inquiries
- Notification preferences
- In-app chats
1.6 User-Generated Content
- Submitted content (e.g., feedback, surveys) may be used to improve services.
1.7 Third-Party SDKs
- We use tools like Firebase and Mapbox, governed by their respective privacy policies.
2. Use of Information
- Manage food deliveries
- Authenticate users
- Process payments and prevent fraud
- Send transactional communications
- Analyze and optimize performance
- Deliver marketing (with consent)
- Use limited automation (e.g., courier matching)
3. Disclosure of Information
- Service Providers: Payment processors, cloud vendors, contractors
- University Partners: Limited operational data only
- Legal: If required by law
- Mergers: With safeguards during corporate transitions
- Cross-Border: Lawful international processing
4. Data Security
- TLS encryption
- Role-based access
- Restricted internal access
- Regular monitoring and assessments
- In the event of a breach, CARI will notify you per applicable law.
5. Data Retention
- For as long as necessary to provide services
- To comply with legal obligations
- To protect legal rights
6. Your Rights and Choices
6.1 Right to Access/Rectify
- Amend data in your account or email contact@caridelivery.com.
6.2 Right to Erasure
- Request deletion by emailing contact@caridelivery.com.
6.3 Right to Opt Out of Marketing
- Unsubscribe from promotional emails in your settings.
6.4 Right to Revoke Location Access
- Manage in your device settings.
7. Cookies and Similar Technologies
- We use cookies to support login, preferences, analytics, and error tracking. You may disable cookies in your browser.
8. Children’s Privacy
- We do not knowingly collect data from anyone under 13. If discovered, such data will be deleted.
9. California Privacy Rights (CCPA)
- Right to know and access personal info
- Right to request deletion
- Right to opt out of sale (CARI does not sell data)
10. Rights of European Users (GDPR)
- Right to access, correct, or erase data
- Right to object or restrict processing
- Right to data portability
- Right to lodge a complaint
11. FERPA Compliance
CARI Campus Delivery (“CARI”) complies with the requirements of the Family Educational Rights and Privacy Act (FERPA) when providing services to colleges and universities.
When CARI operates on a university campus or integrates with campus dining, payment, or identity systems, CARI may receive or process limited student information necessary to facilitate campus dining and delivery services. In such cases, CARI acts as a school official performing institutional services on behalf of the university.
In accordance with FERPA:
- Student information is used solely for the purpose of providing CARI’s campus services, including food ordering, delivery coordination, and related operational functions.
- CARI does not sell, rent, or otherwise disclose student education records to third parties except as required to provide the service or as required by law.
- Access to student information is restricted to authorized personnel who require the information to perform their job responsibilities.
- CARI implements reasonable administrative, technical, and physical safeguards to protect student information from unauthorized access, disclosure, alteration, or destruction.
- CARI processes student data only under the direction of the partner institution and in accordance with contractual agreements with the university.
Universities partnering with CARI retain full ownership and control of their students’ education records. CARI acts solely as a service provider supporting university operations and does not claim ownership of any student education data.
For questions regarding FERPA compliance or student data protection, please contact: contact@caridelivery.com
12. Policy Updates
- CARI may revise this Policy. Continued use of the Services implies acceptance of updates.
13. Contact Information
- Email: contact@caridelivery.com
- Phone: (248) 872-1729
