Privacy Policy

Last updated: September 17, 2026

TrooNow ("we", "us", "our") respects your privacy. This policy explains what data we collect, why, and what we do with it.

TrooNow is a software platform only. We are not a food business and have no involvement in the preparation, handling, or delivery of any food or beverage. When you place an order through a Merchant's site, your transaction is with that Merchant - not with TrooNow. Customer data collected during ordering is collected on behalf of the Merchant and is subject to the Merchant's own privacy practices in addition to this policy.

1. What we collect

From Merchants (food truck / restaurant owners)

• Account info: name, email, phone, business name, password (hashed)
• Business data: menu items, orders, customer lists, settings, uploaded images
• Financial record-keeping data you enter: expenses, vendors, mileage logs, invoices/bills, income entries, tax-rate settings, and any notes or attachments you upload to the bookkeeping tools. This data is retained in your tenant database until you delete it or cancel your account.
• Payment info: Stripe handles all payment processing. We never see or store your full card number. When you enable Stripe Tax, your Stripe-configured tax registrations and calculations are processed by Stripe directly.
• Terms-of-Service acceptance record: at signup we capture the acceptance timestamp, your client IP address, your browser user-agent string, and the version of the Terms you agreed to. This record is kept for the life of the account so we can prove you agreed to a specific version of the Terms.
• Usage data: pages visited, features used (for improving the product, not for advertising)

From Customers (people ordering from a Merchant)

• Order info: name, email, phone, order items, delivery address (if applicable)
• Payment info: processed by Stripe. We store the order total and confirmation status, not card details.

2. How we use your data

• To provide and operate the Service (hosting your site, processing orders, sending notifications)
• To send you account-related emails (order confirmations, billing receipts, password resets)
• To improve the Service (aggregate usage analytics - we don't sell or share individual data)
• To respond to support requests

We do not:

• Sell your data to anyone
• Show you ads of our own, or build advertising profiles about you
• Share your customer lists with other Merchants
• Use your data for AI training

Merchant analytics and advertising tags. A Merchant can enter their own Google Analytics measurement ID or Meta (Facebook) Pixel ID in their TrooNow settings. Both fields are empty by default and most Merchants never fill them in. When a Merchant does fill one in, the tag only loads on that Merchant's own public site, and only for visitors who click Accept on the cookie banner. Click Decline and the tag is never loaded and never sets a cookie. Data collected by those tags goes to Google or Meta under that Merchant's account, not ours. Section 8 lists the exact cookies involved.

On TrooNow's own site (troonow.com) we run no analytics tags and no advertising tags at all.

3. Data isolation

Each Merchant's data is stored in a separate, isolated database file. One Merchant cannot access another Merchant's data. This is enforced at the operating-system level, not just by application logic.

4. Third-party services

We use the following third-party services that process data on your behalf:

• Stripe - optional payment processor for online orders (Stripe Checkout) and in-person POS sales (Stripe Terminal card readers and Stripe Checkout handoff for phone payments). Card data is entered directly into Stripe, never passes through TrooNow, and funds settle directly to the Merchant's connected Stripe account. For Stripe Terminal readers, we briefly request short-lived connection tokens scoped to the Merchant's Stripe account so the reader can authenticate; we do not store cardholder data. (Stripe's privacy policy)
• Square - optional payment processor for online orders (Square Payment Links). Merchants who already use Square can connect their existing Square account via OAuth. Card data is entered directly on Square's hosted checkout page, never passes through TrooNow, and funds settle directly to the Merchant's connected Square account. We store only the OAuth access token and merchant/location identifiers needed to create payment links on the Merchant's behalf; we do not store cardholder data. (Square's privacy policy)
• Twilio - SMS notifications, only if you configure it (their privacy policy)
• OpenStreetMap / Nominatim - map tiles and geocoding (their privacy policy)
• Google Places API - used to power the TrooNow food truck directory. We query Google's Places API to fetch publicly available business information (name, address, rating, photos) for food trucks in cities we index. No customer or merchant personal data is sent to Google through this integration. (Google's privacy policy)
• Mailgun - transactional email delivery (order confirmations, password resets, billing receipts, and other account notifications sent to Merchants and their customers). Email addresses and message content are transmitted to Mailgun for delivery. (Mailgun's privacy policy)
• Sentry - error monitoring and crash reporting. When an application error occurs, Sentry captures technical diagnostic information (stack traces, request URLs, error messages). We configure Sentry with send_default_pii=False to minimize personal data capture; however, error context may incidentally include non-sensitive request metadata. (Sentry's privacy policy)
• Google Analytics - optional, off by default. A Merchant can turn it on for their own site by entering a measurement ID in their settings. It then loads only for visitors who accept cookies, and it reports page views and traffic sources to that Merchant's Google Analytics account. Cookies: _ga, _gid. (Google's privacy policy)
• Meta Pixel (Facebook / Instagram advertising) - optional, off by default. A Merchant can turn it on for their own site by entering a Pixel ID in their settings. It then loads only for visitors who accept cookies, and it reports page views and other activity to Meta so the Merchant can measure and target their own Facebook and Instagram ads. This is the one feature on the platform that can share a visitor's activity with an advertising network, which is why it is opt-in for the Merchant and consent-gated for the visitor. Cookie: _fbp. (Meta's privacy policy)
• Cloudflare - DNS, CDN, and traffic proxy. All requests to troonow.com and tenant subdomains pass through Cloudflare's network, which processes IP addresses and request metadata to provide DDoS protection, SSL termination, and caching. (Cloudflare's privacy policy)

5. Data retention

• Active accounts: we keep your data as long as your account is active.
• Cancelled accounts: we delete your data within 30 days of account cancellation.
• Backups: encrypted daily backups are retained for 14 days, then automatically purged.
• Terms-of-Service acceptance records (timestamp, IP, user-agent, version) are retained for the life of the account plus seven (7) years after cancellation for legal-defensibility purposes.
• Financial records: you - not TrooNow - are responsible for retaining copies of your bookkeeping records for the periods required by applicable law (commonly three to seven years for U.S. tax purposes). Export your data any time from the bookkeeping dashboard using the "Download for your CPA" ZIP. See Terms §8.

6. Your rights

You can:

• Export your data anytime from your admin dashboard (Settings → Export Tenant Data)
• Delete your account - see our Data Deletion Instructions or email support@troonow.com. We remove everything within 30 days.
• Correct your information directly from your admin settings
• Request a copy of your data by emailing support@troonow.com

Meta (Facebook / Instagram) integration: We use Meta's Graph API to publish content you author to the Facebook Pages and Instagram Business accounts you authorize. We store only the access tokens and Page / account IDs needed to publish on your behalf. See our Data Deletion Instructions for how to remove this data, including by revoking the app from your Facebook settings.

7. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., data we are required to retain by law or for legitimate business purposes).
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: We never sell personal information, and TrooNow itself does not share it for cross-context behavioral advertising. One feature can involve sharing: if the Merchant whose site you are on has turned on the Meta Pixel (Section 4), accepting cookies on that site sends your activity to Meta, which under the CPRA counts as "sharing" for cross-context behavioral advertising. You opt out by clicking Decline on that site's cookie banner, which stops the pixel from loading at all. If you already accepted and changed your mind, clear that site's cookies and site data in your browser and choose Decline when the banner appears again. Merchants who leave the Pixel field empty, which is the default, share nothing.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those permitted under CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

How to submit a request: Email support@troonow.com with the subject line "California Privacy Request." We will respond within 45 days. We may need to verify your identity before fulfilling the request.

Shine the Light: California Civil Code § 1798.83 permits California residents to request information regarding disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

8. Cookies

Always on (the site does not work without these)

• admin_token - Merchant login session (HttpOnly, secure)
• staff_token - staff PIN session for a Merchant's employees (HttpOnly)
• operator_token - login session for multi-truck operators (HttpOnly, secure)
• superadmin_token - login session for our own platform console (HttpOnly, secure)
• csrf_token - CSRF protection, required for form submissions
• cart - your shopping cart contents on a Merchant's site
• selected_truck and browse_mode - remember which truck you picked when a Merchant runs more than one
• qr_table - the table number from a QR code you scanned (expires after one hour)
• pos_truck and kitchen_display_truck - remember which truck a Merchant's point-of-sale or kitchen screen is set to
• op_new_truck_pw - a one-time temporary password shown to an operator after they add a truck (expires after 10 minutes)

Your cookie choice itself is stored in your browser's local storage under cookie_consent. It is not a cookie and it is never sent to our servers.

Only after you click Accept

These load only on a Merchant's site, only if that Merchant turned the feature on (see Section 4), and only after you accept the cookie banner. If you decline, or if you never answer the banner, they are never loaded and never set:

• _ga, _gid - set by Google Analytics to count visits and page views
• _fbp - set by the Meta Pixel to attribute activity to the Merchant's Facebook and Instagram ads

We set no advertising cookies of our own, on any site, at any time.

9. Security

• All passwords are hashed with bcrypt (never stored in plain text)
• All connections are encrypted via HTTPS / TLS
• CSRF protection on every form
• Rate limiting on authentication endpoints
• Per-tenant data isolation at the file-system level

10. Children

The Service is not intended for children under 13. We don't knowingly collect data from children.

11. Changes

We may update this policy. We'll email Merchants about significant changes at least 14 days before they take effect.

12. Contact

Privacy questions? Email us at support@troonow.com or use our contact form.