LEGAL

Privacy Policy.

Last updated: July 20, 2026

PL8S is operated by Ivacay LLC, doing business as PL8S ("PL8S", "we", "us"). This Privacy Policy explains how PL8S collects, uses, and shares information when you use our website, mobile app, and related services (the "Platform").

1. Information We Collect

Information you give us

Waitlist: your email address, and optionally your city.
Forms: your name, email, and message when you use the contact or chef-interest forms.
Account and orders (at app launch): your name, email, order history, and preferences. Payments are processed by a third-party payment processor; PL8S does not store your card number.
Content: reviews, photos, and other content you choose to post.

Information collected automatically

Device and usage data: IP address, device type, browser, pages viewed, and interactions with the Platform.
Approximate location: used to show drops near you. Precise location is only used with your permission through your device settings.

2. How We Use Information

To operate the Platform: showing nearby drops, processing reservations, and coordinating pickup.
To send launch updates and service communications you've signed up for (you can unsubscribe from marketing at any time).
To respond to your messages and support requests.
To keep the Platform safe: preventing fraud, spam, and abuse.
To improve the Platform and understand how it is used.

3. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

With Chefs: the details needed to fulfill your order (e.g. your name and order contents — so the right plate goes to the right person).
With service providers that host and operate the Platform on our behalf (see Section 7).
For legal reasons: when required by law or to protect the rights and safety of PL8S, our users, or the public.
In a business transfer: if PL8S is involved in a merger, acquisition, or asset sale, subject to this Policy.

4. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose;
Delete personal information we hold about you;
Correct inaccurate personal information;
Opt out of the sale or sharing of personal information — note that PL8S does not sell personal information and does not share it for cross-context behavioral advertising;
Limit the use of sensitive personal information (we only use it to provide the service); and
Non-discrimination: we will never discriminate against you for exercising these rights.

To exercise any of these rights, email hello@pl8s.app with the subject "Privacy Request" or use the contact form (topic: Privacy request). We will verify your request and respond within the time required by law. You may use an authorized agent to submit requests on your behalf.

Do Not Sell or Share My Personal Information

PL8S does not sell personal information and does not share personal information for cross-context behavioral advertising, and has not done so in the preceding 12 months. Although no opt-out is needed today, California residents may register a "do not sell or share" preference at any time — and it will be honored if our practices ever change — by emailing hello@pl8s.app with the subject "Do Not Sell or Share My Personal Information".

5. Children

The Platform is not directed to children. We do not knowingly collect personal information from children under 16, and, consistent with COPPA, never from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

6. Data Retention and Security

We keep personal information only as long as needed for the purposes above — for example, waitlist emails until launch communications conclude or you unsubscribe, and order records as required for tax and accounting. We use industry-standard safeguards, including encryption in transit, access controls, and hosting with reputable providers.

Data breaches. No system is perfectly secure. If a breach of security affects your unencrypted personal information, PL8S will notify you as required by applicable law, including California Civil Code §1798.82, in the most expedient time possible and without unreasonable delay.

7. Third-Party Services We Use

Vercel — website and API hosting
Supabase — database and authentication infrastructure
Mux — video hosting and streaming
Payment processor — secure payment processing at launch (e.g. Stripe); PL8S never stores full card numbers

Each provider processes data under its own security and privacy commitments.

8. International Users

PL8S currently operates in California and the United States only, and information is processed and stored in the US. If you access the Platform from outside the US, you understand your information will be transferred to and processed in the US.

Future operations. PL8S does not offer services outside the US today. If PL8S expands to Zambia in the future, it will comply with the Zambia Data Protection Act No. 3 of 2021 — including its requirements for lawful processing, data subject rights, and cross-border transfers — before offering services there.

9. Changes to This Policy

We may update this Policy from time to time. We will post the new version here with an updated date, and notify you of material changes.

10. Contact Us

Privacy questions or requests: hello@pl8s.app, or the contact form (topic: Privacy request).