Privacy Policy

Data We Collect

Percivo runs menus, orders, deliveries, payments, and feedback for home kitchens worldwide. To power these workflows we collect:

• Merchant details such as contact information, kitchen address, payout preferences, menu items, pricing, and availability.
• Customer information including name, phone/WhatsApp number, delivery instructions, dietary notes, and order history submitted through merchants.
• Transaction metadata (order values, payment status, receipts), but full card numbers are processed only by our payment partners.
• Interaction data from our web app and integrations (device info, browser type, language, log files, support tickets).
• Content shared through messaging integrations (e.g., WhatsApp templates, automated reminders) to the extent required to deliver the service.

How We Use Your Information

We process the above information to:

• Authenticate merchants, provision their workspace, and deliver order-management features.
• Route WhatsApp/web orders, assign delivery slots, generate prep lists, and send receipts or reminders.
• Collect and reconcile payments, including the $0.10 customer fee and any applicable card surcharges.
• Provide support, troubleshoot issues, and improve reliability, automations, and analytics.
• Comply with legal obligations, enforce our terms, and prevent fraud or abuse.

Controller & Processor Roles

For customer data supplied by a merchant (orders, delivery details, preferences), the merchant controls the data and Percivo acts as a processor/service provider. For merchant account data and platform telemetry, Percivo acts as the controller. We only process data according to written agreements and applicable privacy laws (GDPR, CCPA, and similar regulations).

Data Security

We implement technical and organizational safeguards to protect data against unauthorized access, alteration, disclosure, or destruction.

• Encryption in transit and at rest across our infrastructure.
• Network segmentation, least-privilege access controls, and mandatory MFA for internal tools.
• Vendor reviews plus recurring penetration tests and incident response rehearsals.
• Prompt notification to affected parties if a breach meeting legal thresholds occurs.

Data Retention

Merchant workspace data stays available for as long as the account is active. Closed accounts are deleted or anonymized within 90 days unless law requires longer retention. Order receipts and payment records may be retained for tax, compliance, or dispute purposes.

Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete personal information we hold about you.
• Export data in a portable format.
• Object to or restrict certain processing activities.
• Opt out of marketing communications (service notifications will still be delivered).

Merchants can manage most settings inside the dashboard or by emailing us. Customers who interact with a merchant-powered storefront should contact the merchant directly; we will support them as required by law.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: