Privacy Policy

Effective date: April 17, 2026 · Last updated: April 17, 2026

This is a placeholder policy based on standard Termly.io / Iubenda SaaS language. Final legal language will be reviewed by counsel before general rollout.

1. Who we are

Clearline Standards (“we”, “us”) is a service operated by Candelo Group that helps independent restaurants document third-party delivery pickups for dispute-evidence purposes. Contact: clearlinestandards@gmail.com.

2. What we collect

We collect, from signed-up restaurants:

• Restaurant account info: restaurant name, location names and addresses, owner and billing contact email and phone, delivery platform merchant IDs.
• Pickup records logged by staff through the capture page: photos of the driver’s phone / tablet and the bag, platform selected, substitutions noted, and the timestamp and IP of the submission.
• Fields extracted by our vision model from each photo: driver first name (as shown on the driver’s own app screen), order ID, item count, bag-sealed state.

3. How we use it

We use pickup records solely to produce dispute-evidence packages for the restaurant that collected them, to operate and improve the service, and to accumulate aggregated, anonymized pattern data (see section 6).

4. Retention

Photos and extracted fields are retained for 90 days by default. After 90 days, photos are deleted and extracted fields are anonymized (driver name replaced with a random token) while preserving pattern-level aggregates. Account records are retained while the account is active and for 12 months after cancellation.

5. Driver data

We log only the driver’s first name and last initial as publicly displayed by the delivery platform to the restaurant. We do not collect addresses, phone numbers, or government identifiers of drivers. In our cross-restaurant pattern layer, driver identifiers are stored only as one-way SHA-256 hashes — the plaintext name never leaves the originating restaurant’s own pickup log. Drivers may request deletion of records referencing their first-name/initial token by contacting clearlinestandards@gmail.com.

6. Aggregated anonymized pattern data

We reserve the right to compute, publish, and license to third parties aggregated, anonymized statistics derived from pickup records — for example, regional dispute rates, per-platform chargeback frequencies, bag-seal integrity rates, cuisine-level anomaly patterns, and driver-level aggregate behavior (e.g., the number of distinct restaurants at which a hashed driver identifier has been flagged). Driver identities in the pattern layer are stored as one-way SHA-256 hashes of the publicly-displayed first name combined with the platform; raw driver names are retained only inside the originating restaurant’s own log. No individual restaurant, driver, or customer is identified in aggregated outputs. We do not sell individual records to any third party.

7. Sharing

We share data only with (a) Google, for the Drive and Sheets workspace we provision on your behalf, (b) Anthropic, for the vision extraction and classification of your submitted photos and dispute text, (c) our email provider for transactional email, and (d) as required by law. A list of subprocessors is available on request.

8. Security

Data is stored in Google Workspace and encrypted in transit via TLS. Service-account keys and API keys are kept on restricted infrastructure.

9. Your rights

You may request export, correction, or deletion of your account’s data at any time by emailing clearlinestandards@gmail.com. We comply with CCPA and analogous state-level requirements.

10. Changes

We may update this policy; we will notify account contacts by email of material changes at least 14 days before they take effect.