Privacy Policy
This Privacy Policy explains what information Fliquids collects when you use a Fliquids-powered ordering app to order from an independent café or food-service merchant (each, a "Merchant"). It explains how we use that information, who we share it with, and what rights you have.
If you do not agree with this Privacy Policy, do not use the Fliquids app.
1. Who We Are and What This Policy Covers
Fliquids is a software platform that lets independent cafés and small food-service businesses offer mobile ordering, counter fulfillment, and customer-facing loyalty programs to their customers. Each Merchant uses Fliquids through a connection with their existing Square seller account.
When you order through a Fliquids-powered app, two parties handle your information:
- The Merchant (the café you are ordering from) is the data controller — they decide what information they need from you to fulfill your order, run their business, and (where applicable) operate a customer loyalty program. The Merchant's relationship with you is direct: they are who you are buying from.
- Fliquids is a data processor — we operate the technology platform on the Merchant's behalf, store the data securely, and provide it back to the Merchant through the Merchant's dashboard. We act under the Merchant's instructions for everything specific to your relationship with that Merchant.
This Privacy Policy covers Fliquids' role as the technology provider. The Merchant may have their own privacy practices that supplement this policy. If you have questions about how a specific Merchant uses the data they collect through Fliquids, contact that Merchant directly.
2. Information We Collect
We collect only the minimum information needed to operate the platform and fulfill your orders.
2.1 Information You Provide
- Account information: your email address and display name. If you sign in with Apple or Google, we receive a verified email (or a private relay email if you choose Apple's "Hide My Email") and your display name.
- Order information: the Merchant you order from, the items you order, size and modifier selections, pickup time, order notes, and tip amount.
- Communications: any message you send through in-app support or the support email address listed below.
- Loyalty information: points balances, redemptions, and birthday (if you choose to provide it for the Merchant's birthday-bonus feature).
2.2 Information Collected Automatically
- Device and app data: device type, operating system version, app version, language, and time zone.
- Push notification token: an anonymous device identifier issued by Apple or Google so the Merchant (through Fliquids) can send order-status alerts. You can disable push notifications in your device settings at any time.
- Diagnostic data: crash reports and basic performance metrics used to keep the app working.
- Website analytics: on fliquids.com and tailormadeinnovations.com, we use analytics to understand site traffic. These analytics do not associate individual users with personally identifiable information.
2.3 Information We Do NOT Collect
- We never collect, store, or transmit your payment card information. All card entry and payment processing is handled by Square, Inc. ("Square") through Square's secure payment interface. Your card data goes directly from your device to Square — it never touches Fliquids' servers or the Merchant's systems.
- We do not require or collect your phone number (some Merchants may collect this through their own channels; that is between you and the Merchant).
- We do not collect your precise geolocation. We may infer your time zone from your device for order timing purposes only.
- We do not collect information about you from data brokers or third-party marketing sources.
- We do not use your information for cross-merchant marketing or profiling. A Merchant only sees the customers who have ordered from that Merchant. A customer's data at Café A is not visible to Café B.
3. How We Use Your Information
We use the information we collect to:
- Create and secure your account.
- Accept, prepare, and fulfill your orders for the Merchant.
- Send you order-status notifications (order received, in progress, ready for pickup).
- Operate the Merchant's loyalty program if they offer one (track points, redemptions, birthday bonuses).
- Respond to support requests from you or the Merchant.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations (tax records, law-enforcement requests).
- Improve the platform's stability and performance using aggregated, non-identifying diagnostic data.
We do not use your information for advertising, profiling, or sale to third parties. We do not share your data between unrelated Merchants.
4. Cross-Merchant Isolation
When you order from Merchant A, your account, order history, and loyalty balance with Merchant A are logically separated from Merchant B. The technical boundary is enforced by row-level security in our database — a Merchant's dashboard shows only the customers and orders associated with that Merchant.
If you order from multiple Merchants on Fliquids, you may see those orders separately in your customer-app order history. Some Merchants may share a brand or ownership; in that case the same Merchant operator is the data controller for all locations.
5. Service Providers We Share Information With
We share limited information with vendors who help us run the platform. Each vendor is contractually required to handle your information only for the purposes we authorize.
| Vendor | Purpose | Data Shared |
|---|---|---|
| Square, Inc. | Payment processing; merchant account integration | Payment details you enter at checkout (handled by Square directly), order total, order ID, Merchant ID |
| Supabase | Account database, order database, real-time order delivery | Account email, display name, order contents, push token, loyalty balance |
| Resend | Transactional email (receipts, password resets) | Email address, order details |
| Expo | Push notification delivery (iOS + Android) | Anonymous push token, notification content |
| Apple, Inc. | "Sign in with Apple" (optional); App Store distribution | Whatever Apple returns to us when you sign in |
| Google LLC | "Sign in with Google" (optional); Google Play distribution | Whatever Google returns to us when you sign in |
| Vercel, Inc. | Hosting the Merchant dashboard (web) and the public marketing site | Order data + customer email displayed to the Merchant in their own dashboard (read-only render of Supabase data) |
| Stripe, Inc. | Subscription billing for Merchants (not for Buyers) | Merchant business name, billing email, payment method (card data held by Stripe directly, not us) |
We do not sell or rent your personal information to anyone.
6. Information Shared with the Merchant
The Merchant you ordered from has access to the following information about you:
- Your display name and email address
- Your order history with that Merchant (items, sizes, modifiers, totals, pickup times)
- Your loyalty balance and history with that Merchant (if they operate a loyalty program)
- Your tip amount
The Merchant uses this information to fulfill your orders, recognize you as a returning customer, and operate their business. The Merchant does not see other Merchants' data about you, and other Merchants do not see this Merchant's data about you.
7. Legal Bases for Processing
Where required by law, we process your information on the following bases:
- Performance of a contract: to provide the Fliquids platform and fulfill your orders.
- Legitimate interests: to keep the platform secure, prevent fraud, and improve service quality.
- Consent: where you opt in to push notifications, loyalty programs, or other optional features.
- Legal obligation: where we must retain records for tax, accounting, or law-enforcement purposes.
8. Data Retention
- Account information is retained for as long as your account is active. If you delete your account, we delete your profile within 30 days, except where we are legally required to keep records (e.g., tax records for completed transactions).
- Order records are retained for 7 years to meet tax and accounting requirements under applicable state and federal law.
- Loyalty records are retained while your account is active or while the Merchant operates the program. If a Merchant disconnects from Fliquids, we retain their customers' data for 90 days to allow data export to the Merchant before deletion.
- Push tokens are deleted when you uninstall the app or disable notifications.
- Diagnostic data is retained for up to 90 days in aggregated form.
If a Merchant disconnects from Fliquids, we will notify you (through the app or by email) at least 30 days before deleting their customer data, so you have the opportunity to export your order history and loyalty balance.
9. Security
We use industry-standard technical and organizational measures to protect your information, including:
- TLS encryption in transit between your device, Fliquids, and our service providers.
- Encrypted-at-rest databases for stored data.
- Per-Merchant row-level security in the database to enforce cross-Merchant isolation.
- Multi-factor authentication enforced on all Merchant administrator accounts.
- Audit logging on privileged actions taken by Merchant administrators.
- OAuth tokens between Fliquids and Square encrypted at rest using libsodium.
Payment information is handled entirely by Square and is protected by Square's PCI-DSS-compliant infrastructure.
No system is perfectly secure. We will notify you of a data breach involving your personal information as required by applicable state and federal law, including California Civil Code § 1798.82 (for California residents) and Texas Business & Commerce Code Chapter 521 (for Texas residents).
10. Your Privacy Rights
10.1 California Residents (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"):
- Right to know what personal information we collect, use, disclose, and retain.
- Right to delete the personal information we hold about you, subject to legal exceptions (e.g., completed transaction records).
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing of your personal information. We do not sell or share your personal information, so there is nothing to opt out of.
- Right to limit use of sensitive personal information. We do not use sensitive personal information for any purpose that would require this option.
- Right to non-discrimination for exercising any of these rights.
Categories of personal information collected in the past 12 months: identifiers (email, name, device ID), commercial information (order history, loyalty history), internet/electronic activity (app usage), and inferred information (time zone).
Categories disclosed for a business purpose: identifiers and commercial information, shared only with the service providers listed in Section 5 and with the Merchant you ordered from per Section 6.
How to exercise your rights: email support@fliquids.com with the subject line "CCPA Request." We will verify your identity (typically by confirming the email associated with your account) and respond within 45 days. You may designate an authorized agent to make a request on your behalf.
10.2 Texas Residents (TDPSA)
If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act ("TDPSA," Tex. Bus. & Com. Code Ch. 541):
- Right to know what personal data we process about you.
- Right to access a copy of your personal data in a portable format.
- Right to correct inaccurate personal data.
- Right to delete personal data we hold about you, subject to legal exceptions.
- Right to opt out of (a) targeted advertising, (b) the sale of personal data, and (c) profiling that produces legal or similarly significant effects. Fliquids does not engage in targeted advertising, sale of personal data, or profiling — there is nothing to opt out of.
How to exercise your rights: email support@fliquids.com with the subject line "TDPSA Request." We will verify your identity (typically by confirming the email associated with your account) and respond within 45 days, with a possible 45-day extension if reasonably necessary.
Right to appeal: if we deny your request, you may appeal by emailing the same address with the subject "TDPSA Appeal." If we deny your appeal, you may contact the Texas Attorney General's Consumer Protection Division to submit a complaint.
10.3 All Users
Regardless of where you live, you may:
- Review and update your account information inside the app.
- Delete your account inside the app or by emailing support@fliquids.com.
- Disable push notifications in your device settings.
- Request a copy of the data we hold about you by emailing support@fliquids.com.
- Export your order and loyalty history from a specific Merchant by visiting that Merchant's settings page in the app.
11. Children's Privacy
The Fliquids app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact support@fliquids.com and we will delete it. Users between 13 and 18 must have the involvement of a parent or legal guardian to create an account.
12. International Users
Fliquids is designed for customers of independent food-service merchants located in the United States. If you use the app from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
13. Third-Party Sign-In
If you choose to sign in using Apple or Google, those companies will ask your permission to share certain account information with us (typically your email address and display name). Their handling of that information is governed by their own privacy policies:
14. Square's Role
Fliquids uses Square, Inc. as its payment processor, OAuth identity provider for Merchants, and source of catalog data shared with Merchants. When you make a payment, Square handles your card data directly under their PCI-DSS-compliant infrastructure. Square's privacy practices are governed by their own privacy policy:
15. Do Not Track
Some browsers and devices send a "Do Not Track" signal. Because there is no common industry standard for interpreting these signals, Fliquids does not respond to them. We do not engage in cross-site tracking in any case.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email and update the "Last Updated" date above. Continued use of the app after the changes take effect constitutes your acceptance of the updated policy.
17. Contact Us
If you have questions, complaints, or requests about this Privacy Policy or your information:
Email: support@fliquids.com
Mail:
Tailor Made Innovations LLC
Mailing address available on request via the support email above.
For California residents exercising CCPA rights, please use the subject line "CCPA Request." For Texas residents exercising TDPSA rights, please use the subject line "TDPSA Request."
For complaints or questions about a specific Merchant's handling of your data, contact that Merchant directly. The Merchant's contact information is available in their dashboard or in the app's "About this café" section for each Merchant you have ordered from.
This Privacy Policy v1.0 is an operating policy in effect for the Fliquids platform as of 2026-05-15. It is currently under counsel-grade legal review; a finalized version will replace this notice when the review is complete. We have published this version pre-finalization to ensure transparent disclosure during our founder-cohort onboarding. Please contact legal@fliquids.com with questions about the policy itself.