Privacy Policy

This Privacy Policy describes how Calabi ("Calabi", "we", "us" or "our") collects, uses, discloses and protects personal information in connection with the calabi.us website and every channel through which Calabi accepts requests, including text message, telephone, email, the AI assistant on our website and the Calabi MCP server (together, the "Services"). It also applies to individuals who apply to become Runners or submit information about a store. Capitalized terms not defined here have the meanings given in our Terms of Service.

1. Information we collect

Information you provide

• Contact information: name, email address and phone number.
• Delivery information: delivery address and map location, drop-off location, delivery notes (such as gate codes) and scheduled delivery times.
• Order information: stores, items, prices, fees, taxes, tips, promotional or referral codes, order status and receipts.
• Account information: if you sign in, the name and email address associated with your Google account, and the profile details and saved addresses you add.
• Payment information: payment card details are collected and processed directly by our payment processor, Stripe. We receive a customer reference, card brand, last four digits, expiration date and payment status.
• Communications: messages you send through the website chat, text message, telephone and email, and our responses (see Section 3).
• Text message consent records: your mobile number, opt-in and opt-out status, the method and wording of consent, and the date and time.
• Support and feedback: contact form submissions, problem reports, refund requests, ratings and comments.
• Applications: if you apply to become a Runner or submit information about a store, the name, email, phone number, city, transportation, store details and other information you provide.

Information collected automatically

• Device and usage information: standard server log data, such as IP address, browser type, pages or services requested and timestamps.
• Location information: with your permission, your device location, used to suggest nearby addresses and identify your delivery address.
• Cookies and similar technologies: see Section 7 and our Cookie Policy.
• Security logs: for staff tools, the IP address and result of each sign-in attempt.

Information from third parties: Google (name and email address when you sign in with Google), Stripe (payment status, card brand and last four digits), Twilio (phone number and message delivery status), and referral codes when you arrive through a referral link.

2. How we use information

We use personal information to:

• process, shop, deliver and support your Orders and errands, and send receipts;
• communicate with you about your Orders by email and, if you opt in, by text message;
• process payments, refunds, promotions and referral credits;
• interpret requests submitted by chat, text message, telephone or email and prepare your cart (see Section 3);
• review Orders and communications to provide support, correct errors and improve the Services;
• detect and prevent fraud and abuse, and protect the security of the Services;
• maintain records required by law, including tax and payment records; and
• review Runner applications and store submissions.

3. AI assistant and communications

• AI processing. To interpret your request, the content of your chat messages, text messages, call transcripts and emails is processed by our AI service provider, Anthropic. When you are signed in, the AI assistant can access your cart, profile, saved addresses and the brand and last four digits of saved payment cards.
• Telephone calls. Calls to our AI phone line are handled by Twilio, which converts speech to text. We store the text transcript of the call.
• Text messages. We store text messages you send us, our replies and your consent record.
• Email. Emails you send are stored in our Google-hosted email system.
• Website chat. Actions taken through the chat, such as cart, order, profile and address updates, are saved, and chat transcripts may be retained for review.
• Review. Authorized Calabi personnel may review communications to fulfill Orders, correct errors and respond to you.

Calls, text messages, emails and chats with Calabi may be recorded or transcribed.

4. How we disclose information

• Runners receive your name, phone number, delivery address, delivery notes and Order details to complete your delivery.
• Stores receive the information needed to complete your purchase, such as a name for a pickup order.
• Service providers that perform services on our behalf, each limited to the information needed for its function:
  • Stripe: payment processing, saved payment methods and refunds.
  • Supabase: database, authentication and server functions.
  • Render: application and website hosting, including the MCP server.
  • Twilio: text messaging and telephone services.
  • Anthropic: AI processing of chat, text, call and email messages.
  • Google: Google sign-in, address search and suggestions, maps on order tracking pages, and email. Google receives your IP address and the map area viewed when maps are displayed.
  • OpenStreetMap (Nominatim): secondary address lookup, which receives the address or location being looked up.
  • jsDelivr: delivery of a code library used for sign-in, which receives standard request data such as IP address.
• Third-party AI applications. If you use a third-party AI application with our MCP server, that application receives the store, product and price information it requests. Its use of your information is governed by its own privacy policy.
• Legal and safety purposes: to comply with law or legal process, or to protect the rights, property or safety of Calabi, our Users, Runners or the public.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this Privacy Policy.

We do not sell personal information.

5. Text messaging

If you opt in at checkout or text us, we use your mobile number to send messages about your Orders and to respond to you. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help. We retain your messages, our replies and a record of your opt-in and opt-out.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except service providers that deliver messages on our behalf. See the Text Messaging Terms.

6. Data retention

We retain personal information for as long as needed to provide the Services and for the purposes described in this Privacy Policy, including Order records, communications, transcripts and consent records. We may retain information as needed to comply with tax, accounting and legal obligations, resolve disputes, prevent fraud and enforce our agreements. Our service providers retain certain records under their own policies. Information stored in your browser remains until you clear it (see the Cookie Policy).

7. Cookies and similar technologies

We use cookies and similar technologies that are necessary to operate the website and process Orders, including the first-party cookie calabi-cart-id to maintain your cart, browser storage for your sign-in session, delivery address and recent Orders, and cookies set by Stripe on payment pages for fraud prevention. Details are in our Cookie Policy.

8. Your choices and rights

You may request to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate personal information;
• delete your personal information and your account; and
• opt out of the sale or sharing of your personal information.

You may opt out of text messages at any time by replying STOP.

To submit a request, use our privacy request form, email support@calabi.us or call 843-481-0943. We will verify your request by matching it to the email address or phone number associated with your Orders and may ask you to confirm from that address or number. An authorized agent may submit a request on your behalf with your written permission. We respond to requests within the time required by applicable law and will not discriminate against you for exercising your rights.

9. Children's privacy

The Services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit (HTTPS), encryption of stored data by our database provider, role-based access controls and two-factor authentication for staff tools. Payment card data is processed by Stripe. No method of transmission or storage is completely secure. We will notify affected individuals of a security breach as required by law. See our Security page.

11. Where information is processed

The Services are intended for users in the United States. Information is processed in the United States and may be processed in other countries by our service providers subject to their safeguards.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date and will provide additional notice of material changes as required by law.

13. Contact us

Calabi, Carolina Forest, South Carolina. Email: support@calabi.us. Phone and text: 843-481-0943. You may also use the contact form.