Privacy Policy

PlumRun Delivery LLC, doing business as PlumRun, provides grocery shopping and local delivery through https://plumrun.shop and associated services. This policy explains how we handle personal information. The Android app also has a separate App Privacy Policy.

Personal information identifies you or can reasonably be linked to you. External websites have their own practices. This policy describes PlumRun's handling of information and the providers used for its services.

Effective date: October 17, 2026. Last reviewed: October 17, 2026.

Technical and Security Information

Our website and service providers process technical information needed to operate and secure the service. Cloudflare Turnstile processes IP addresses, browser and device characteristics, and security-verification signals to help distinguish people from bots and prevent abuse. Our server uses request information to limit repeated sign-in attempts.

We record order actions and timestamps to maintain order history, coordinate shopping and delivery, and resolve issues. These records may be associated with your account. We do not use an advertising or general visitor-analytics service in the current website.

Device and Browser Information

Our website and its security providers process information such as device type, operating system, IP address, browser characteristics and CAPTCHA security signals. These support website operation, sign-in protection and abuse prevention.

Optional Foreground Delivery Location

The assigned shopper can explicitly turn on location sharing during an active delivery in PlumRun Shopper. After the shopper grants device location permission, the app sends the shopper's latitude, longitude, device-reported accuracy and capture time while that delivery screen is active in the foreground. Location updates pause when the app goes into the background. They can resume when the shopper returns to the active delivery screen while sharing remains enabled. Closing that screen, turning sharing off, or confirming arrival or delivery stops sharing. The latest fix may remain visible until a stop request reaches the service or the fix expires, as described below. This feature does not request or collect the customer's device GPS location. Customer-provided delivery addresses may still be converted temporarily into coordinates for service-area checks. Run mileage is entered manually.

The delivery-tracking service holds only the latest fix for each order in temporary server memory, rather than storing a GPS route in order or run history. A fix is available only while it is less than 120 seconds old and the delivery is active before arrival; it is then withheld and discarded. Closing sharing clears the server copy when the stop request reaches the service. If that request cannot be delivered, the latest fix expires within 120 seconds of its capture. The authenticated customer for that order and its assigned shopper can retrieve a current fix. Other customers and unassigned shoppers cannot retrieve it. An optional arrival estimate is entered by the shopper; it is not a calculated route or guaranteed arrival time.

Optional Delivery Maps

The website does not load the delivery map until the customer chooses Show delivery map. That choice loads an embedded OpenStreetMap map with the shopper's latest shared coordinates. OpenStreetMap receives the requested map area and coordinates and ordinary request information such as the viewer's IP address and browser characteristics. Its service may use its own cookies or similar storage under the OpenStreetMap Foundation Privacy Policy. Declining to load the map does not prevent viewing order status or using order chat.

Browser storage used for sign-in and theme preferences is described in our Cookie and Local Storage Policy.

Private Order Content

PlumRun accepts private order messages, delivery instructions, issue reports, ratings, and receipt, item and delivery photographs through its associated services. Content is associated with the relevant account or order and used for shopping, delivery, support, security and issue resolution.

Submitting order content does not make it a public post or authorize advertising or social-media publication. Relevant order participants and service providers may access it as needed to provide and support the service, or as required by law.

Collection and Use of Information

We collect information when you register or sign in; browse stores or products; place or manage an order; provide delivery details; exchange order messages or respond to substitutions; submit receipts, photographs, ratings or issue reports; use shopping, delivery or run-summary features; or contact admin@plumrun.shop.

We use it to provide account access, coordinate grocery shopping and delivery, process payment references, communicate about orders, maintain transaction records, resolve issues, meet applicable legal obligations, and secure the service against fraud and abuse.

We associate account information with the relevant order, messages, photographs, payment references and workflow records. Customer-provided delivery addresses may be checked through the U.S. Census address lookup service. Current practice orders use Stripe sandbox checkout and do not collect real payments.

How Long We Keep Your Personal Information

Optional live delivery location is an exception to the durable order records described below: the tracking service keeps only the latest fix in temporary memory, makes it unavailable once it is 120 seconds old, and does not store a GPS route in order or run history. A newer fix replaces the previous one; arrival, stopping sharing or the end of active delivery also ends its availability.

Retention depends on the information and its purpose, including account operation, order fulfilment, customer support, payment and accounting records, security, and legal obligations or disputes. We do not currently apply one automatic deletion period to all account, order, message and photograph records.

Contact admin@plumrun.shop to request access, correction or deletion. We review requests after verifying identity, subject to applicable law and any lawful need to retain records. The website and app currently have no self-service account-deletion control. Expiration of a temporary photograph link does not delete the underlying image.

Disclosure of Personal Information to Third Parties

Information may be made available to the relevant customer and assigned shopper as needed for shopping, communication, delivery and issue resolution; personnel and contractors who operate or support the service; and hosting, database, storage, security, catalog, payment and address-lookup providers for their respective services.

Providers include Spaceship Hyperlift (hosting), Turso (database), Cloudflare (Turnstile security and private R2 image storage), Kroger (store and product catalog), the U.S. Census Geocoder (address lookup), and Stripe (hosted checkout). In the Android app, Google ML Kit performs on-device barcode and receipt recognition. Optional Google Maps links open an external service. OpenStreetMap provides the website delivery map only when the customer chooses to display it. The information each provider receives depends on the feature used; not every provider receives every data category.

Stripe handles card entry through hosted checkout. PlumRun stores payment references, status and amounts, not full card numbers. Current practice checkout uses Stripe test mode.

Disclosure may also occur where required by applicable law or necessary to establish, exercise or defend legal rights, or to a successor in a business transfer subject to applicable law. Service providers may process information in the United States and other locations where they operate.

Your Rights and Controlling Your Personal Information

Contact admin@plumrun.shop with privacy questions or to request access, correction or deletion of personal information. Depending on applicable law, you may also have rights to a copy of your information, objections, restrictions, withdrawal of consent, or an appeal of a decision.

We may request information reasonably needed to verify identity and understand a request. Requests are handled under applicable legal requirements and exceptions, including lawful record-retention obligations. The current product has no self-service account-deletion feature.

We do not use advertising or email-newsletter services in the current product. Private order content is not provided for advertising or unrelated marketing use. We do not discriminate against users for exercising applicable privacy rights. You may contact a relevant regulator about a privacy complaint.

We will follow applicable requirements for security incidents and material changes in how information is used.

Cookies and Local Storage

The website stores an opaque sign-in token and a theme preference in browser local storage. Cloudflare provides website protection and Turnstile verification, which process technical security signals and may use necessary security storage. External Stripe checkout has its own cookie and storage practices.

The current product does not use advertising or general visitor-analytics integrations. Browser settings can control cookies and local storage; clearing or disabling sign-in storage may sign you out. See our Cookie and Local Storage Policy for more details.

Additional U.S. State Privacy Disclosures

These additional provisions apply only to the extent the relevant state law applies to PlumRun, the individual and the processing activity. Listing a right does not mean every state privacy law applies to every user or activity. Nothing here removes rights under applicable law.

Categories of Information Collected

Where a state privacy law applies, the relevant categories used by PlumRun include:

• Identifiers: name, email, account identifiers and IP address.

• Customer and order records: delivery address, instructions, payment status and transaction references. Stripe processes payment details through hosted checkout.

• Commercial information: grocery orders, purchase history, quantities, prices, fees and tips.

• Visual information: receipt, item and delivery photographs.

• Location information: customer-provided delivery addresses, temporary coordinates derived from those addresses, and optional recent foreground location fixes from the assigned shopper during an active delivery. GPS routes are not stored in order or run history.

• Order messages, issue reports, ratings and manually entered run information.

Sources and purposes are described above. Categories describe the information relevant to features you use; they do not mean we directly collect full card numbers, government identifiers or every type of data listed in a statute.

Access, Correction and Deletion Requests

Where applicable law provides these rights, you may request categories and specific pieces of information held about you; their sources, purposes and recipients; correction; deletion; and a portable copy. You may also have rights concerning sale, sharing, targeted advertising or certain profiling, and the right to appeal a privacy-request decision.

Send requests to admin@plumrun.shop. We may verify identity and apply lawful exceptions. Provide your account email and enough detail for us to understand the request; do not send passwords, full card numbers or unnecessary identity documents.

California Marketing Information Requests

Where California Civil Code section 1798.83 applies, California residents may request information about disclosures of covered personal information to other organizations for their own direct marketing. Contact admin@plumrun.shop with a privacy-information request.