EatLocally Privacy Notice
This notice describes how Viva Global LLC (“Viva Global”), operator of the EatLocally platform at eatlocally.ai, and each participating chamber of commerce collect, use, and share information when you use the platform and any chamber-curated program operated on it.
Active programs and data controllers
For each program operated on the platform, the issuing chamber is the data controller for that program’s Member data. Viva Global is the data processor across all programs.
| Program | Data controller | Effective |
|---|---|---|
| Dine In Cupertino | Cupertino Chamber of Commerce | May 4, 2026 |
Who controls your data
For Member data within a program, the issuing chamber is the data controller — it decides what data is collected and how it is used in that program. Viva Global is the data processor — it operates the EatLocally platform on the chamber’s behalf and processes data only as the chamber directs and as described here.
What we collect
When you create an account:
- Identifiers: name, business name, email, phone
- Account info: encrypted password, role (restaurant or company)
- Business info you provide: menus, packages, hours, photos, description
- Activity: requests, responses, bookings, messages exchanged within the platform
- Email engagement: opens and clicks (only for the daily specials email, only if you opt in)
When you visit the website without an account:
- Standard server logs (IP address, browser, referrer, page visited)
- Anonymous, aggregated usage analytics — no third-party advertising or tracking
How we use your data
We use your data only to:
- Operate the program — route quote requests, send confirmations, support your account
- Send the daily specials email if you opt in
- Maintain and improve the platform (bug fixes, performance)
- Generate de-identified aggregate analytics (e.g., “X% of chamber members used the platform last month”)
- Prevent abuse, fraud, and security incidents
- Comply with legal obligations
What we won’t do
- We won’t sell your data to anyone, ever.
- We won’t use your data for advertising or to train third-party AI models.
- We won’t share your data outside the program without your explicit consent.
Who we share data with
Sharing is limited to what’s required to run the program:
- The Chamber — receives reports on aggregate program usage. Does not receive individual user activity unless required to manage program participation (e.g., a participation dispute).
- Restaurants and Companies — when you initiate a request or booking, the relevant business sees your name, contact info, and the request details. This is core to the program — without it, no request can be fulfilled.
- Service providers that help us operate the platform: email delivery (Resend), hosting (Cloudflare), payments (Stripe, only if used). Each is contractually bound to the same privacy commitments.
- Law enforcement — only when required by valid legal process.
Customer data after fulfillment. Once a Restaurant has fulfilled an order you placed with them, your contact info and order details are also held by that Restaurant — and they may keep and use that information subject to their own privacy obligations, independent of this notice. This is the same as if you'd contacted the Restaurant directly. To exercise data rights against the Restaurant (access, deletion, etc.), contact the Restaurant directly; we can supply their contact info on request at [email protected].
Your rights
You can:
- Access your data — view it in your account or request a copy via [email protected]
- Correct your data — edit your profile, or email support
- Delete your data — cancel your account; all data is deleted within 30 days (except records law requires us to retain)
- Opt out of marketing — unsubscribe from the daily specials email at any time
- Withdraw consent for any use that requires it
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, the right to correct, the right to opt out of sale (we don’t sell — but you have the right anyway), and the right not to be discriminated against for exercising these rights. To exercise CCPA rights, email [email protected].
How long we keep your data
We keep your data while your account is active. After you cancel:
- Account data: deleted within 30 days
- Transaction records: retained for 7 years (required by tax law)
- Security incident logs: retained as needed to investigate
Cookies and tracking
We use a minimal set of cookies for authentication and basic site analytics. We do not use third-party advertising cookies, tracking pixels, or behavioral profiling.
Children
The platform is not directed at children under 16, and we don’t knowingly collect data from them.
Changes to this notice
We may update this notice from time to time. For material changes, we will email account holders with at least 30 days’ notice before the change takes effect.
Contact
| Privacy questions, CCPA requests | [email protected] |
| Account & support | [email protected] |
| Cupertino Chamber of Commerce | [email protected] |