Privacy Policy

Last updated: August 4, 2026

This Privacy Policy explains how BUY THE WAY INC (“Buy The Way,” “we,” “us,” or “our”) collects, uses, and shares information when you use buytheways.com and our related services (the “Platform”). Buy The Way is a technology platform that lets you order food from independent restaurants for scheduled pickup at a fixed drop point on campus. By using the Platform, you agree to this Policy and our Terms of Use.

1. Information we collect

Information you provide to us:

  • Account. Your mobile phone number (used to sign you in with a one-time code) and, when you set up your profile, your name.
  • Orders. The items you order, the restaurant, your chosen pickup location and time, any notes, and the community you order on behalf of (if any).
  • Payments. When you pay, your card details are collected and processed by our payment processor (Stripe). We do not store full card numbers on our servers.
  • Waitlist. If you join our waitlist, the contact details you provide (such as name and email).
  • Content & communications. Reviews, ratings, and any messages you send us.

Information collected automatically:

  • Usage & device. Pages viewed, actions taken, device and browser type, IP address, and similar technical data.
  • Cookies & identifiers. A first-party identifier stored in a cookie (btw_vid) to recognize your device and measure how the Platform is used. See our Cookie Policy.
  • Attribution. How you arrived at the Platform (for example, a link’s UTM parameters), so we can understand which channels bring people to us.

2. How we use information

  • Provide and operate the Platform, create your account, and sign you in.
  • Process and fulfill your orders and payments, and share order details with the restaurant.
  • Notify you about your order and pickup (for example, status updates).
  • Prevent fraud, enforce our Terms, and keep the Platform secure.
  • Measure and improve the Platform, and understand which channels bring people to us.
  • Communicate with you, including service messages and, where permitted, updates.

3. How we share information

We do not sell your personal information. We share it only:

  • With restaurants (“Food Providers”) — the order details they need to prepare your order.
  • With service providers that run the Platform on our behalf, under contract, including Stripe (payments), Supabase (database, authentication, and file storage), Twilio (SMS one-time codes), Mapbox (maps), Vercel (hosting), Sentry (error monitoring), and Google (waitlist spreadsheet). They may use your information only to provide services to us.
  • For legal reasons — to comply with law, respond to lawful requests, or protect our rights, our users, and the public.
  • In a business transfer — for example, a merger, acquisition, or sale of assets, subject to this Policy.

4. Cookies & tracking

We use a first-party cookie and identifiers to run the Platform and measure usage. We do not use third-party advertising cookies. See our Cookie Policy for details and choices.

5. Your choices & rights

  • Account info. You can update your profile in the app or by contacting us.
  • California residents. Under the CCPA/CPRA you may have the right to know, access, delete, or correct your personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined, and we will not discriminate against you for exercising your rights. To make a request, contact us at support@buytheways.com.
  • Communications. You can opt out of non-essential messages by following the unsubscribe instructions or contacting us. You may still receive essential service messages about your orders.

6. Data retention & security

We keep personal information for as long as needed to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. We use reasonable technical and organizational measures to protect your information, but no method of transmission or storage is completely secure.

7. Children

The Platform is intended for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

8. Where we operate

The Platform is intended for users in the United States. If you access it from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those where you live.

9. Third-party links

The Platform may link to third-party sites or services we don’t control. Their privacy practices are their own; please review their policies.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we’ll update the “Last updated” date and, where appropriate, provide additional notice.

11. Contact us

Questions about this Policy? Contact BUY THE WAY INC at support@buytheways.com.