Privacy Policy

Effective date: July 7, 2026 · Operator: PorchPop

PorchPop helps neighbors discover farm stands, home bakers, and sweet-treat makers nearby. We try to collect as little as possible and to be plain about what we do with it. This policy explains what we collect, why, and the choices you have.

What we collect

• Account info: the email address and display name you sign up with.
• Vendor listing content: what you sell, your story, photos, hours, allergen info you enter, and the general area you show to buyers.
• Precise vendor location & phone (kept private): a vendor's exact pickup address and phone number are stored privately. They are never shown on your public listing except as allowed by the address-visibility rules below.
• Preorder requests: if you send a vendor a preorder, we store the item, quantity, and the note you write — these are shown to that vendor so they can respond.
• Basic usage data: approximate, aggregate signals like how many times a profile was viewed, so vendors can see their reach.
• Waitlist emails: if you sign up on our website before launch, we keep your email and ZIP code (and, for vendors, your name and a short note) so we can tell you when we open near you.

Address visibility for vendors

• You choose who can see your pickup address. Every vendor picks one of three settings: shown to any signed-in user (like a storefront), shown only while you are open, or shared only with a buyer whose preorder you have accepted. Farm stands use the storefront setting; home bakers and pop-ups choose their own.
• Addresses are never shown to visitors without an account. A buyer must be signed in and tap a "Show address" button to see any vendor's address, and it is only revealed if your chosen setting allows it at that moment.
• Every reveal is recorded. We keep a log of which account viewed which vendor's address and when, so vendors have a record if anything ever needs looking into.
• Festival & market spots: if you add a temporary "where I am today" location when going live, that spot is shared with signed-in users for that session only — your usual address stays as private as your setting keeps it.

How we use it

• To run the app: show listings, let buyers find and follow vendors, and let vendors go live.
• To keep PorchPop safe: review listings, photos, and reviews before they go public, and act on reports.
• To send you notifications you ask for, like fresh-drop alerts from vendors you follow.
• To tell waitlist members when PorchPop launches in their area.

What we don't do

• We do not sell your personal data.
• We do not run ad networks or share your data with advertisers.
• We do not sell anyone's location or share it with third parties. Vendor pickup addresses are shown only to signed-in PorchPop users, only according to the visibility setting each vendor chooses (see "Address visibility for vendors" above).
• We do not use advertising or analytics cookies on this website — that's why there's no cookie banner. Our hosting provider may set strictly-necessary cookies for security, and nothing more.

Who we share it with

• Other PorchPop users, as the product works: your public listing content is visible to people browsing the app; reviews you post appear with the name you chose; and a preorder request you send is shown to that vendor. That's the point of each feature — we never share these beyond the people they're for.
• Service providers who help us run the app, such as Supabase, which hosts our database, storage, and authentication. They may only process data on our behalf.
• Legal requirements: if the law requires it, or to protect people's safety, we may disclose information in response to a valid legal request.

Keeping and deleting your data

We keep your information for as long as your account is active. You can delete your account anytime from Settings in the app. Deletion is immediate and permanent: it erases your profile, your stand, your photos, your reviews, your preorders, and everyone you follow, and it cannot be undone. To remove a pre-launch waitlist email, write to us at admin@porchpop.app.

Children

PorchPop is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us their information, contact us and we will remove it.

How we protect your data

Every table in our database uses row-level security, which means a person can only read or change the specific data they are allowed to — the default is "no access." Precise addresses and phone numbers live in a separate, owner-only area. Privileged actions like moderation and account deletion run on our servers, never with keys shipped inside the app. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we make a material change, we will update the effective date above and, where appropriate, let you know in the app. Continuing to use PorchPop after a change means you accept the updated policy.

Contact

Questions about privacy? Email us at admin@porchpop.app.