Privacy

GrazePost, operated by Nupik Wenpach LLC, runs shops for independent makers of food and other goods. That means we hold two kinds of information: the account a maker opens with us, and the customer records a maker keeps inside their shop. This page says what we store, why, and what we never do with it.

What we store about makers

• Your name, email address and phone number, from signup.
• A hash of your password. We cannot read the password itself.
• Timestamps of what you agreed to: account email at signup, and product news only if you ticked that box. You can leave product news any time.
• Your shop's settings, products, drops and billing state.

What a shop stores about its buyers

• Name and phone number, and the orders placed.
• Store credit, kept as a ledger of entries rather than a balance.
• Text message consent as a timestamp. Drop alerts go only to buyers with that timestamp on record, only inside quiet hours, and every text honours STOP.

Buyer records belong to the maker who runs that shop. The maker can export them or ask us to delete them; if you are a buyer, the maker you bought from is the right first door to knock on, and we help them honour the request.

What we do not do

• No third-party trackers or ad scripts on buyer-facing pages. None.
• We do not sell or rent anyone's information.
• We do not text anyone without recorded consent.

Cookies

We set functional cookies only: the session that keeps you signed in. Your light or dark choice is stored in your own browser and never sent to us. There is nothing here a cookie banner would be protecting you from, which is why there is no cookie banner.

Who processes data for us

The platform is hosted in the United States. Card payments, when enabled, are handled by Stripe; card numbers never touch our servers. Text messages, when enabled, are delivered by Twilio. Each processor sees only what its job requires.

Changes

If this page changes in a way that matters, makers hear about it at their account email before it takes effect.