Privacy Policy
Last updated September 28, 2026
This explains what information Stallpass (“Stallpass”) collects, why, who we share it with, and your choices. The short version: we use your information to run Stallpass, we share it with markets only when you apply, and we don't sell your personal information.
What we collect
- Account details: your email address, name, and (for vendors) phone number.
- Business details: business name, what you sell, description, menu or product list, photos, social links and setup needs.
- Documents you upload: permits, licenses, insurance certificates and similar files, with the dates you enter.
- Activity: markets you apply to, application status, messages from organizers, reviews you write, and payment records.
- Sales reports: the sales totals you report for market days. If you connect Square, we read your payment totals (read-only) to fill these in. We can't move money or see card numbers.
- Location: a home ZIP code if you give one. If you tap “near me”, your browser shares your approximate location for that search only; we don't store it.
- Partner clicks: when you click a partner link or copy a promo code, we record that it happened (and your account, if you're signed in) so we can be paid by the partner.
- Technical data: the cookies needed to keep you signed in, and basic logs (such as IP address and browser) used for security and fixing problems. We don't use advertising trackers.
How we use it
- To run your account and the features you use: storing documents, reminding you before they expire, applications, reviews and payments.
- To send you emails you need (sign-in links, reminders, application updates, receipts).
- To keep Stallpass safe: preventing spam, fraud and abuse.
- To improve Stallpass.
Who we share it with
- Markets you apply to receive your business profile, contact details and the documents you choose to attach. Markets not yet on Stallpass get this by email, with a secure link that expires after 14 days.
- A market's organizer sees the sales reports you submit for their market. We may use sales figures combined and anonymized across many vendors (never your individual numbers) to show typical sales ranges and to improve Stallpass.
- The public sees reviews. Vendor reviews are shown as “Verified vendor” with no name; shopper reviews show your first name and last initial.
- Service providers who run parts of Stallpass for us: Supabase (database and file storage), Netlify (hosting), Stripe (card payments), Square (only if you connect it), our email provider, Cloudflare (bot protection) and OpenStreetMap (map images). They may only use your information to provide their service.
- When the law requires it, or to protect people's safety or rights.
We don't sell or “share” personal information for advertising.
How long we keep it
We keep your information while your account is open. When you delete your account, we delete your profile, documents, photos, applications and reviews. Some records (such as payment records) may be kept longer where the law requires.
Your choices and rights
- See and download your data: Account → “Download my data”.
- Correct it: edit your profile, business details and documents at any time.
- Delete it: Account → “Delete my account”.
- California residents have these rights under the California Consumer Privacy Act (CCPA), and won't be treated differently for using them. You can also email us to make a request.
Security
Documents are stored privately; only you, markets you apply to, and our admin can open them, through links that expire after 60 seconds. Access to data is restricted by account at the database level.
Children
Stallpass is for people 18 and over. We don't knowingly collect information from children.
Changes
We'll post any changes here and tell you about important ones.
Contact
Email stallpass.live@gmail.com. See also our Terms.