Privacy Policy

Copper Stag LLC, operating as Craev

Effective Date: March 24, 2026

Last Updated: March 27, 2026

This Privacy Policy describes how Copper Stag LLC, operating as Craev (“Craev,” “we,” “us,” or “our”), collects, uses, stores, and discloses information about users (“you”) of our website located at getcraev.com, our Craev consumer mobile application, and our CraevControl vendor management application (collectively, the “Platform”).

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide Directly

We collect the following categories of personal information that you provide when creating an account or using the Platform:

(a) First and last name;

(b) Email address;

(c) Phone number;

(d) Password (stored in hashed, encrypted form — never in plaintext);

(e) Truck name and cuisine type (vendors only);

(f) Payment information, processed and stored securely by Stripe, Inc. Craev does not store raw payment card numbers.

1.2 Information Collected Automatically

When you use the Platform, we automatically collect:

(a) Precise GPS location data from vendor devices, used to broadcast truck location to nearby customers in real time. Customer devices provide location data to display nearby trucks on the map. Location access requires explicit permission and may be revoked in device settings at any time;

(b) Device information, including device type and operating system version;

(c) App usage data, including screens viewed, features used, and session duration;

(d) Order history.

1.3 Information from Cookies and Tracking Technologies

On our website getcraev.com, we use cookies and similar tracking technologies for analytics and session management. See our Cookie Policy for full details.

1.4 Information We Do Not Collect

We do not collect age, gender, mailing addresses, employer information, or job titles. We do not knowingly collect personal information from children under the age of 13.

2. How We Use Your Information

We use collected information for the following purposes:

(a) To provide, operate, and improve the Platform;

(b) To process food orders and vendor subscription payments;

(c) To broadcast vendor location to customers in real time;

(d) To send transactional emails, including account verification codes, order confirmations, and account notifications;

(e) To send push notifications, with explicit user permission, including order status updates and followed truck alerts;

(f) To send promotional or marketing emails, with user consent. Users may opt out at any time;

(g) To verify user identity and prevent fraud;

(h) To provide customer support;

(i) To analyze platform usage and improve our services.

3. How We Share Your Information

3.1 Service Providers

We share personal information with third-party service providers who assist us in operating the Platform. These providers are contractually obligated to use your data only for the purposes of providing services to Craev. Our primary service providers include:

(a) Stripe, Inc. — payment processing. Stripe is PCI-DSS compliant;

(b) Google LLC — analytics (Google Analytics) and mapping services;

(c) Google Workspace / Gmail — transactional email delivery via SMTP;

(d) Cloud hosting provider — backend server and database hosting within the United States.

3.2 We Do Not Sell Your Data

Craev does not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

3.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Craev, our users, or the public.

4. Data Retention

We retain personal data for as long as your account is active. Upon account deletion, personal data is removed from active systems within thirty (30) days, except where retention is required by applicable law.

5. Your Rights and Choices

5.1 Access and Correction

You may request a copy of the personal information we hold about you by contacting us at hello@getcraev.com.

5.2 Account Deletion

You may delete your account directly through the Platform at any time. Upon deletion, your personal data will be removed in accordance with Section 4.

5.3 Opt-Out of Marketing Communications

You may opt out of promotional or marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting hello@getcraev.com. You may not opt out of transactional communications, including order confirmations, verification codes, and account security notifications, as these are required for platform functionality.

5.4 Location Data

You may revoke location permissions at any time through your device settings. Revoking location access may limit certain platform features.

5.5 Push Notifications

You may manage push notification preferences at any time through the app settings or your device settings.

6. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

(a) The right to know what personal information we collect, use, disclose, or sell;

(b) The right to request deletion of your personal information;

(c) The right to opt out of the sale of personal information. Craev does not sell personal information;

(d) The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at hello@getcraev.com with the subject line: California Privacy Request.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Passwords are stored using industry-standard hashing. Payment data is handled exclusively by Stripe using PCI-DSS compliant infrastructure. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

All data is collected, processed, and stored within the United States. We do not transfer personal information outside of the United States.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform. Continued use of the Platform after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Copper Stag LLC (Craev)
Statesville, NC 28677
hello@getcraev.com
getcraev.com