Cerca Privacy Policy

Effective date: July 7, 2026

Last updated: July 7, 2026

Cerca ("Cerca," "we," "us," or "our") operates the Cerca website and mobile application (together, the "Service"), a hyperlocal marketplace that connects neighbors with local restaurants, home kitchens, shops, and service providers in the United States. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights available to you.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information you give us

• Contact form submissions. When you use the "Contact" form on our website (name, email, message, and your relationship to us — neighbor, seller, etc.), we collect that information to respond to you and to improve the quality of our Service and support.
• Business/seller applications. When you apply to sell on Cerca, we collect your business name, business type, business address, phone number, email, website, a description of your business, and an optional logo/image. We use this information to evaluate your application, onboard your business, and operate the marketplace (e.g., displaying your listing, processing orders, and enabling payouts).
• Account information. If you create an account in the app, we collect information such as your name, email, phone number, and delivery/service addresses.
• Content you post. Reviews, ratings, messages, photos, and other content you submit through the Service.
• Payment information. Payments are processed by Stripe, Inc. ("Stripe"), our third-party payment processor. We do not store your full payment card number on our servers — Stripe collects and processes that information directly, subject to Stripe's own privacy policy and PCI-DSS obligations.

1.2 Information collected automatically

• Device and usage data, such as IP address, device identifiers, browser type, operating system, pages viewed, app interactions, referring URLs, and timestamps.
• Location data, such as your approximate or precise location (with your permission), used to show you nearby businesses and to support delivery tracking.
• Cookies and similar technologies used on our website to keep the site working and to understand what visitors find useful (see Section 6).

1.3 Information from third parties

• Delivery partners. When you place a delivery order, we share limited order and location information with our delivery partner, Uber (via Uber Direct), so a courier can be dispatched and your delivery can be tracked. Uber may return delivery status and courier information back to us.
• Payment partners. Stripe shares limited transaction status information with us (e.g., payment succeeded/failed, payout status) so we can operate the marketplace.
• Analytics and diagnostic providers. We use analytics tools and may use additional third-party libraries or services to help us understand app usage, diagnose crashes, and improve performance and reliability.

2. How We Use Information

We use the information we collect to:

1. Operate the Service. Run the marketplace, display business listings, process orders, appointments, and event tickets, facilitate payments through Stripe, and coordinate deliveries through Uber.
2. Improve quality. Data submitted through the contact form is used to improve the quality of our customer support, our Service, and our communications with neighbors and businesses.
3. Run the business side of the platform. Business/seller application and listing data is used to let the platform run — approving and onboarding sellers, displaying accurate listings, processing orders and payouts, and enforcing our Community Guidelines and Terms of Service.
4. Communicate with you. Send transactional messages (order confirmations, receipts, booking confirmations, delivery updates), respond to support requests, and — where you've agreed — send updates about the Service.
5. Analyze and diagnose. Use analytics and diagnostic tools (our own and third-party) to understand feature usage, detect and fix bugs, and improve the Service.
6. Ensure safety and compliance. Detect, prevent, and investigate fraud, abuse, prohibited listings, and violations of our Community Guidelines or Terms of Service; comply with legal obligations.

We use content submitted through our contact form and the data we collect about businesses only for the purposes described above and elsewhere in this Policy.

3. We Do Not Sell Your Data

Cerca does not sell your personal information. We do not exchange your personal information with third parties in return for money or other valuable consideration, and we do not share personal information with third parties for their own independent marketing purposes.

We do share information with service providers who help us run the Service, under contractual limits on how they may use it, including:

• Stripe — payment processing and payouts.
• Uber — delivery dispatch and tracking (Uber Direct).
• Analytics, crash-reporting, and diagnostic providers — to understand and improve app performance (we may add or change these providers from time to time; this Policy will be updated accordingly).
• Cloud hosting and infrastructure providers — to store and process data securely.
• Professional advisors and, where required, law enforcement or regulators — to comply with the law, respond to legal process, or protect the rights, property, or safety of Cerca, our users, or the public.

If Cerca is ever involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy or a successor policy of at least equal protection.

4. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including to operate your account or business listing, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we delete or anonymize it, except where we are required or permitted by law to keep it longer.

5. Your Privacy Rights

Depending on where you live, you may have rights under U.S. state privacy laws — including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and similar laws in other states. Depending on your state of residence, these rights may include the right to:

• Know/access the personal information we have collected about you and how we use and share it.
• Delete personal information we have collected from you, subject to certain exceptions (e.g., information we must keep for legal, tax, security, or fraud-prevention purposes).
• Correct inaccurate personal information.
• Opt out of the sale or "sharing" of personal information, or of the use of personal information for targeted advertising. As noted above, we do not sell your data, and we do not currently use it for cross-context behavioral advertising.
• Data portability, where applicable.
• Non-discrimination for exercising any of these rights.

How to exercise your rights / request deletion

To exercise any of these rights, including a request to delete your data, submit a request through the Contact form on our website (cerca.app) or email us at hola@cerca.app. Please describe your request and provide enough information for us to verify your identity (e.g., the name, email, or phone number associated with your account or application).

We will acknowledge and respond to verifiable requests within the time required by applicable law (generally within 45 days, with one 45-day extension where permitted). We may need to retain certain information even after a deletion request where required for legal compliance, to complete a transaction, to detect security incidents, or to exercise legal claims, as permitted by law.

We do not knowingly collect personal information from children under 13 (see Section 8).

6. Cookies and Analytics

Our website uses cookies and similar technologies to keep the site working (e.g., remembering your cookie preference) and to understand what visitors find useful, including through analytics providers and, potentially, additional third-party diagnostic libraries. You can accept or decline non-essential cookies using the cookie banner on our site, and you can control cookies through your browser settings. Declining cookies may affect some site functionality.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. Payment data is handled by Stripe under industry-standard PCI-DSS controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us using the details in Section 10.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (e.g., in-app notice or email). Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

10. Contact Us

If you have questions about this Privacy Policy or your personal information, contact us:

• Contact form: available on our website
• Email: hola@cerca.app
• Mail: Cerca US LLC, 1200 Biscayne Blvd, Miami, FL 33132, United States

See also our Terms of Service and How Cerca Works.