Más Cabrón Delivery ("we", "us", "our") is operated by Taquería El Más Cabrón (4226 East Olympic Blvd, Los Angeles, CA 90023) in partnership with Aurion Business Optimization LLC, the technology provider. This Privacy Policy describes the information we collect when you use our mobile application and website, how we use it, and the choices you have.

1. Information We Collect

When you place an order, we collect:

• Identity & contact: name, phone number, email address.
• Delivery details: delivery address and, while a delivery is in progress, approximate GPS location to help our driver reach you.
• Order data: products you ordered, special instructions, order timestamps, order history.
• Payment data: processed directly by Stripe, Inc. We do not store your full card number or CVV on our servers. We receive only a tokenized reference and the last four digits.
• Technical data: device type, app version, crash logs, basic usage analytics needed to keep the service stable.

2. Information We Do NOT Collect

• Your contacts list.
• Your photos or camera roll.
• Your browsing history outside our app.
• Microphone audio.
• Health or biometric data.

3. How We Use Your Information

• To process and fulfill your order.
• To contact you about your order (confirmation, ETA, issues).
• To provide customer support.
• To comply with tax, accounting, and other legal obligations.
• To prevent fraud and abuse.

We do not sell your personal information.

4. Third-Party Processors

We share the minimum information necessary with:

• Shipday, Inc. — delivery dispatch and driver tracking. Receives your name, delivery address, phone, and order details.
• Stripe, Inc. — payment processing. Receives your payment method and billing details directly.
• Apple / Google — app store distribution and push notifications, if you opt in.

Each of these providers operates under its own privacy policy and is contractually required to protect your data.

5. Data Retention

Order records are retained for seven (7) years to comply with United States federal and California tax requirements. Account contact details are kept while your account is active and deleted within 30 days of an account deletion request, except where retention is required by law.

6. Your Rights

Under the California Consumer Privacy Act (CCPA) and the EU General Data Protection Regulation (GDPR), you have the right to:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention).
• Opt out of marketing communications at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@elmascabron.delivery. We will respond within 30 days.

7. Children

Our service is not directed to children under 13. We do not knowingly collect information from children under 13 (COPPA). If you believe a child has provided us information, contact us and we will delete it.

8. Security

We use TLS for all data in transit and industry-standard practices for data at rest. No system is perfectly secure; please use a strong account password.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the app and on this page with an updated "Last updated" date.

10. Contact

Privacy questions: privacy@elmascabron.delivery
General support: support@elmascabron.delivery
Instagram: @tacos_elmas_cabron
TikTok: @tacos_el_mas_cabron
Facebook: Tacos El Más Cabrón
Mail: 4226 East Olympic Blvd, Los Angeles, CA 90023, USA