Effective date: July 9, 2026

This Privacy Policy explains how Graze.day, operating graze.day, collects, uses, stores, and shares information when you visit or use our website, directory, account features, vendor tools, organizer tools, notifications, and related services.

By using the site, you acknowledge the practices described in this Privacy Policy.

Information we collect

We collect the information needed to operate the directory, support shoppers, vendors, and organizers, keep listings useful, and improve the platform.

This may include your name, email address, account details, authentication details, profile image, saved markets or vendors, favorite categories, notification settings, onboarding choices, preferred radius, ZIP code, approximate location coordinates if you choose to provide them, and other account preferences.

If you are a vendor or organizer, we may also collect business name, company or organization information, listing details, address or service-area details, website links, social links, contact information, scheduling details, roster details, verification details, claim or application information, and any text, photos, logos, graphics, or other materials you upload.

If you contact us, join a waitlist, submit feedback, report a listing issue, request removal of a listing, or suggest changes, we collect the information you provide, such as your name, email, relationship to a listing, message, source URL, and related context.

If you purchase or manage Vendor Plus, payment processing is handled by Stripe. We do not store full payment card numbers. We may store billing status and Stripe customer or subscription identifiers so the correct listing receives paid access.

We may also collect technical and usage information such as IP address, browser type, device type, pages visited, referring pages, search activity, saved or clicked listings, form submissions, error reports, session identifiers, and interactions with the site.

How we use information

We use information to operate, maintain, and improve the site.

This includes creating and managing accounts, publishing and maintaining listings and profiles, supporting search and location features, processing claims, applications, approvals, corrections, and removals, sending transactional emails and requested notifications, supporting payments and entitlements, responding to inquiries, supporting moderation, protecting the platform, and communicating with users.

We may also use submitted information and public-facing listing content to market and promote the platform, including through emails, social media, and related promotional materials.

We may use saved listings, favorite categories, search behavior, and other interactions to personalize recommendations, surface relevant markets or vendors, measure product performance, and improve site quality.

Cookies, analytics, and similar technologies

We use cookies and similar technologies for authentication, session management, security, preferences, analytics, and product measurement.

We use Google Analytics, Vercel Analytics, and first-party analytics to understand how visitors use the site and to improve performance and usability. These tools may collect information such as pages viewed, referral sources, browser information, device information, general location derived from IP address, and interaction data.

You can control cookies through your browser settings, though some parts of the site may not function properly if cookies are disabled.

Location information

Graze.day uses location information to power nearby search, default radius settings, market discovery, map previews, and notification recommendations.

You may provide a ZIP code or choose to use your current location. If you use current location, your browser or device controls the permission prompt. We may store approximate coordinates and the source of your default location preference with your account.

We may use third-party mapping or geocoding services, including Google Maps, OpenStreetMap tile sources, and postal-code lookup providers, to resolve, display, or preview locations.

Public listing content

If you submit photos, logos, graphics, descriptions, schedules, or other content for a vendor, organizer, or market listing, that content may be displayed publicly on the site.

By submitting content, you understand that it may also be used by Graze.day in connection with operating, promoting, and marketing the platform, including in search results, listing pages, emails, social media posts, directory features, paid ads, and promotional materials.

Do not upload confidential, sensitive, or private information you do not want made public.

How we share information

We may share information with service providers that help us host, secure, analyze, maintain, operate, authenticate, email, map, or process payments for the site. These providers may include hosting, database, authentication, storage, analytics, email, mapping, geocoding, and payment providers.

We may share publicly visible listing and profile information as part of the directory experience.

We may also disclose information if required by law, to protect our rights or users, or in connection with a merger, acquisition, financing, or asset sale.

We do not sell personal information for money.

Data retention

We retain information for as long as reasonably necessary to operate the site, maintain records, support moderation and trust, resolve disputes, enforce agreements, and comply with legal obligations.

Saved vendors, vendor claims, organizer approvals, moderation history, billing records, notification records, analytics records, error reports, and related operational records may be retained to support trust, accuracy, administration, security, accounting, and legal compliance.

Public listing content may remain visible until it is changed or removed. Backup copies, cached copies, prior email sends, search engine results, and historical promotional materials may persist after public content is changed.

Authentication

We use Supabase to support account authentication and session management. You may sign in using email, password, email code, or a third-party provider such as Google or Apple.

When you use a third-party sign-in provider, we may receive basic account information such as email address, name, profile image, and provider user identifier, depending on that provider's settings and your choices.

Your choices

You may contact us to request access to, correction of, or deletion of personal information we hold about you, subject to applicable law and legitimate business needs.

You may update account preferences, default location, favorite categories, saved markets, saved vendors, and notification settings from your account where those controls are available.

You may opt out of marketing emails by using the unsubscribe link in those emails. You may change notification email preferences in your account.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children’s privacy

The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and revise the effective date.

Contact

Questions or privacy requests may be sent through the contact page at graze.day/contact or by email to hello@graze.day.