Privacy Policy
Dodi's Burguer · Last updated: October 14, 2026
In short: we collect only what Dodi's Burguer needs to work, we don't sell your data, we don't use advertising cookies, and you can ask for access, correction or deletion at any time at support@santarella.store.
1. Who we are
Dodi's Burguer is a service of Santarella Company LLC, located at 6751 Forum Drive, Orlando, Florida 32821, United States (“Santarella”, “we”, “us”). Santarella is the controller of the data described in this policy, meaning we decide how and why it is processed, except as explained in section 3.
This policy covers the burguers.dodis.shop website, the Dodi's Burguer web app and our email and WhatsApp support. Privacy contact: support@santarella.store.
2. Data we collect
We collect only what you give us or what using the app generates:
- Business account: business name, email, CNPJ (Brazilian company ID) and password (stored encrypted by our sign-in provider).
- Store: address and map location, delivery area, logo, banner, menu, product photos, prices and settings. If the store connects its own WhatsApp, that integration's credentials are kept in a restricted area.
- Couriers: name, phone, email, photo (optional), vehicle type, service area, rating, linked businesses, messages with the business, routes and deliveries. While a courier is signed in to the app, their real-time location is used to dispatch and track deliveries; we keep only the latest position, which is erased when they sign out.
- Orders from the stores' customers: name, phone, delivery address, items, notes, chosen payment method and change needed (see section 3).
- Dashboard use: audit logs of actions taken in the account and preferences such as theme and printer.
- Subscription: plan, subscription status and the Stripe customer and subscription IDs. Card details stay with Stripe; we never see or store them.
- Support: what you send us by email, such as your name and message.
- Website visits: your approximate country, which our hosting provider infers from your IP address, used only to show the right language and support contact. We do not store it.
3. Data about the stores' customers
When someone places an order on a store's online menu, the store is the controller of that data and Santarella acts as a processor: we process it only to record, prepare, deliver and track the order, following the store's instructions. To exercise rights over that data, contact the store; we help the store respond.
Orders are paid directly to the store; the app never receives customers' card details. To print an order, the customer's name, phone and address are sent to the printer or print agent installed on the store's computer. Anyone with the tracking link can see the order status.
4. How we use your data
We use data for the purposes below, each with its legal basis:
- Create and maintain your account and provide the service (performance of a contract).
- Process payments and meet tax and legal obligations (performance of a contract and legal obligation).
- Answer your support requests (performance of a contract and legitimate interest).
- Keep the service secure, prevent fraud and abuse, and fix bugs (legitimate interest).
- Send important notices about your account, subscription or changes to these documents (performance of a contract).
- Read a menu photo uploaded by a store to add products automatically (performance of a contract).
We don't sell your data, we don't use it for third-party advertising, and we don't make automated decisions that affect your rights.
5. Who we share data with
We use providers that process data on our behalf, only for the purposes described:
- Supabase: database, sign-in and file storage.
- Vercel: website and app hosting.
- Stripe: payments. It receives your email and the purchase details; card details are entered directly with Stripe.
- Cloudinary: image storage (logos, product and courier photos).
- Anthropic: reads the menu photo a store uploads to add products automatically. No customer or courier data is sent.
- Z-API: when a store connects its own WhatsApp, it receives the customer's name and phone number to send order updates.
- OpenStreetMap-based map services: Photon (address search), Nominatim (your approximate location on the Explore page, if you allow it), OSRM (route calculation) and CARTO (map images).
- Google Maps and Waze: only when a courier opens turn-by-turn navigation to an address.
- WhatsApp: when you open a chat or share something through a WhatsApp link, the message goes through WhatsApp.
We may also share data when required by law, by order of a competent authority, to defend legal rights, or in a business reorganization, always with the same level of protection.
6. International transfers
Santarella is based in the United States, and our providers may process data in the United States and other countries. These transfers are needed to provide the service and are made with providers that apply appropriate contractual and security safeguards.
7. Device permissions
The app asks for permissions only when you use a feature that needs them:
- Location: required for couriers while they are signed in, to dispatch and track deliveries; optional on the Explore page, to show stores near you.
- Notifications: on the order tracking page, to let you know when the status changes.
- Bluetooth and USB: only if the store uses a thermal printer connected to the browser.
- Files: to upload a logo, banner and photos.
- You can deny or revoke any permission in your browser or device settings. The app keeps working, just without the feature that needs it.
9. How long we keep data
We keep data while your account is active. If you ask us to delete it, we delete or anonymize it within 15 days, except what we must keep to meet legal obligations (such as payment records), to exercise legal rights or to prevent fraud. Provider backups are overwritten on their normal cycles.
Orders are kept while the store keeps its account, because they are part of its history and finances; the store can ask for them to be deleted.
10. Security
We use encrypted connections (HTTPS), sign-in with passwords protected by our authentication provider, and database access rules so that each account sees only its own data. No system is completely immune to failures; if an incident could cause you significant risk or harm, we will notify you and the competent authorities as required by law.
Please also keep your password safe and don't share it.
11. Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or US state privacy laws such as California's), you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent at any time. We don't sell or share personal information for cross-context behavioral advertising, and we won't treat you differently for exercising your rights.
To exercise any right, including deleting your account, email support@santarella.store from your account's email address. For now, account deletion is handled by our support team. We reply within 30 days. You may also complain to your local data protection authority.
Stores can export their financial records as CSV from the dashboard.
12. Children
The service is intended for adults 18 or older, for professional use. We do not knowingly collect data from minors.
13. Changes to this policy
We may update this policy. If a change is significant, we will let you know in the app or by email before it takes effect. The date at the top shows the latest update.
14. Contact
Santarella Company LLC · 6751 Forum Drive, Orlando, Florida 32821, United States
Email: support@santarella.store