The short version. We collect what the service needs to work. We do not sell personal information. We do not share mobile numbers or text messaging consent with anyone for marketing. We do not use your data or your customers' data to train AI models.
1. Who is responsible for what
Dearly Local is operated by Smart Space Integration LLC. There are two layers of responsibility here and it is worth being clear about them.
- We are responsible for the information we collect to run Dearly Local itself: your account, your login, your subscription, the way you use the app, and the messages the platform sends on a shop's behalf.
- Each seller is responsible for the customer information inside their own workspace. When you order from a shop, that shop decides what it keeps about you and how it contacts you. We hold and protect that data for them, and we do not use it for our own purposes. If you want a shop to delete what it holds about you, ask the shop, and tell us if they do not respond.
2. What we collect
Account information
Your name, email address, password (stored hashed, never in readable form), and optionally your phone number, profile photo, and time zone. If you sign in with Google, we receive your name, email address, and profile image from Google, and never your Google password.
Seller and workspace information
Your business name, workspace address, contact details, logo and brand colors, business hours and time zone, products, menus, pricing, pickup and delivery windows, team members and their roles, and your bookkeeping records: sales, expenses, receipts, and payments.
Order information
What was ordered, from whom, when, for how much, the chosen pickup or delivery window, delivery address where relevant, order status, invoices, and receipts.
Payment information
Payments are processed by Stripe. Card numbers go to Stripe directly and never touch our servers. We keep what Stripe hands back: the amount, the currency, the status, the last four digits and card brand, and the identifiers needed to reconcile a payment to an order.
Content you create
Notes, recipes, instructions, shopping lists, photos and files you upload, chat messages, and entries in the Dearly Desk password vault. Vault entries are encrypted before storage.
Technical information
IP address, browser and device type, pages viewed, actions taken in the app, and error reports. Email messages we send carry an open marker so a sender can see whether a message was read. Push notifications require a subscription token from your browser, which identifies the device and not you.
Messages we send
We keep a record of every email and text the platform sends: the recipient, the content, the time, the delivery outcome, and for texts the number of segments billed. That log is what lets a seller prove they told a customer something, and it is what lets us answer a carrier asking who agreed to be texted.
3. How we use it
- To run the service: accounts, storefronts, orders, and handoffs.
- To send transactional messages: confirmations, receipts, readiness notices, window reminders, and security notices.
- To take payment and to reconcile it against an order.
- To provide support when you ask for it.
- To keep the service safe: detecting fraud, abuse, and unauthorized access, and enforcing our Terms of Service.
- To understand how Dearly Local is used in aggregate, so we can improve it.
- To meet our legal, tax, and accounting obligations.
We do not sell personal information, and we do not share it with anyone for their own advertising.
4. Mobile numbers and text messaging consent
Giving us a mobile number is always optional and is never a condition of buying anything. You give it when you enter it yourself: at checkout, when creating your account, in your profile, or on a shop's contact form. We record when consent was given and how, so that we can answer for it later.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories described in this policy exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.
Mobile numbers are shared only with our messaging provider, Telnyx, and the carriers, for the sole purpose of delivering the messages you asked for. They are not shared with any other party for any marketing purpose.
You can stop texts at any time by replying STOP. The Text Message Terms explain the program in full.
5. Who we share with
We use a small number of service providers to run Dearly Local. Each gets only what it needs to do its job, and none of them may use it for their own purposes.
- Supabase: database, authentication, and file storage.
- Cloudflare: application hosting and file storage.
- Stripe: payment processing and subscription billing.
- Resend: email delivery.
- Telnyx: text message delivery.
- Google: sign in with Google, if you use it.
- Anthropic: the AI assistant. What you type to the assistant and the workspace data it needs to answer are sent to Anthropic's API to generate a reply.
Your content is not used to train AI models, by us or by our providers. Assistant conversations are used to answer you and for nothing else.
We will also disclose information when:
- the law requires it, or a valid legal process compels it, in which case we will tell you unless we are prohibited from doing so;
- it is necessary to protect the rights, safety, or property of Dearly Local, our users, or the public;
- a business transfer happens, such as a merger or acquisition, in which case this policy travels with the data and we will notify you.
6. Cookies
We use cookies that are necessary for the service to work: keeping you signed in, keeping your basket, and protecting against cross site request forgery. We do not use advertising cookies and we do not run third party advertising trackers. Blocking essential cookies will stop you being able to sign in.
7. How long we keep it
- Account and workspace data: while your account is open. After you close it we keep the data for a limited period so it can be restored if the closure was a mistake, then delete it.
- Orders, invoices, and payment records: for as long as tax and accounting rules require, typically seven years. These survive account closure because a seller has to be able to answer for their books.
- Message logs: retained as delivery and consent evidence, which is also what a carrier audit asks for.
- Opt-out records: kept indefinitely. If we deleted the record that you said STOP, we would have no way to keep honoring it.
8. Security
Data is encrypted in transit and at rest. Passwords are hashed, never stored in readable form. Password vault entries are separately encrypted before storage. Access between workspaces is enforced at the database level, not just in the application, so one shop cannot read another's data even if the app had a bug.
No system is perfectly secure. If a breach affects your personal information we will tell you and any regulator we are required to tell, without undue delay.
9. Your choices and your rights
- See and correct. Most of what we hold about you is visible and editable in your account settings.
- Export. Sellers can export their workspace data, including while an account is past due or cancelled.
- Delete. Ask us and we will delete what we are not legally required to keep. Where a seller holds the data, ask that seller first.
- Choose your channels. Notification settings control which messages reach you by email, text, push, or in the app. Transactional messages such as receipts and security notices cannot be switched off.
- Stop texts. Reply STOP to any message.
- Unsubscribe from email. Every non-transactional email carries an unsubscribe link.
Depending on where you live you may have additional rights, including access, portability, correction, deletion, and the right not to be discriminated against for exercising them. We honor these requests regardless of where you live. Write to support@dearlylocal.com and we will respond within the time the law allows.
We do not sell or share personal information as those terms are defined under California law, and we have no financial incentive program tied to your data.
10. Children
Dearly Local is not for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to support@dearlylocal.com and we will delete it.
11. Where your data lives
Dearly Local is operated from the United States and data is stored and processed there. If you use it from elsewhere, you are sending your information to the United States, where privacy law differs from your own.
12. Changes to this policy
We may update this policy. If a change is material we will tell account holders by email or in the app before it takes effect. The effective date at the top of this page always reflects the current version.
13. Contact
Privacy questions and requests go to support@dearlylocal.com. A real person reads it.