Privacy policy

We collect as little as we can to get your order to you.

What we collect

• Guests: your first name, your phone number if you choose to give it, and what you ordered.
• Accounts: your email (or Google account email), name, optional phone, order history, points, and the stores you follow.
• Sellers: your name, Penn State email, phone, club, store details, menu, and Zelle details (QR code, Zelle email or phone, and display name).
• If you turn on notifications, a push subscription for your device.

What we don’t collect

No payment or bank information. Payments happen in your own bank app by Zelle, directly to the seller. We don’t sell your data or show ads.

Who sees what

• The seller you order from sees your first name, your order, and your phone number if you gave one.
• If you check “Text me when my order is ready”, the seller texts you once from their own phone, so you’ll see their number.
• Home sellers’ pickup addresses are shown only to buyers who placed an order.
• The SASA board (admins) can see stores, applications, and orders to run events and help with problems.

Where it’s stored

Data is stored with our hosting providers (Supabase for the database and files, Vercel for the website) and in your browser for things like your cart and saved orders.

Deleting your data

You can ask us to delete your account and orders at any time. Contact the SASA board from the email on your account (or with your order code if you ordered as a guest), and we’ll delete it within 30 days. Sellers may keep their own records of sales.