Privacy
Last updated October 25, 2026
What we collect
- Back-in-stock alerts: your email address, ZIP code and the sizes you want, so we can tell you when they’re back or when we deliver to you.
- Orders: your name, email, mobile number and delivery address, and for gifts the recipient’s name, mobile and address, plus any gift note.
- Payments: handled by Stripe. We don’t receive or store full card numbers. “Save this card” is ticked at checkout unless you untick it; Stripe then keeps the card for your next order. Cards saved while signed in can be removed in Account; for any other saved card, email us and we’ll remove it.
- Your account: when you confirm your mobile number with a code we text you, we keep your name, email, delivery addresses (and gift recipients’ names, mobiles and addresses) so you don’t have to type them again. There’s no password.
- Address search: as you type an address, the letters go to Google Places to suggest matches.
- Corporate orders: the company contact’s details and each recipient’s name, mobile, address and drop-off notes, used only to deliver their gift.
- Cookies we set: one keeps you signed in on this device for up to a year; another marks which device placed an order, so confirming your number can add that order to your account. Your bag and the details you typed are kept in your browser only.
How we use it
To deliver your order, send order and delivery updates by email and text, sign you in, and, if you asked for a back-in-stock alert, email you once. We share the delivery address, name and phone number with our courier partner only to complete the delivery.
Who helps us
Stripe (payments), Uber Direct (delivery, including the doorstep photo), Quo (text messages), Zoho (email), Google Places (address suggestions), Upstash (order storage) and Vercel (hosting and privacy-friendly page-view counts). Each handles only what it needs for its part.
How long we keep it
Orders and delivery records for up to about 13 months, account details while you use the account, and sign-in codes for 10 minutes. Ask us to delete your information sooner at any time.
Advertising measurement
We advertise on Meta (Facebook and Instagram) and Google. To learn which ads lead to orders, our public pages load the Meta Pixel and the Google Ads tag, which use cookies. When you order, we tell Meta about the purchase (what you bought and the amount) along with your email, mobile number, name, city and ZIP, scrambled (hashed) before they leave us, plus your browser’s IP address and the Meta cookie. For gifts we don’t send the recipient’s details. If you came from a Google ad, we tell Google about the purchase (the amount and order number) with the ad-click code its tag saved, and nothing else about you. Your private order and gift pages load neither tag.
If your browser sends Global Privacy Control, we load neither tag and send nothing about your order. You can also opt out of ad personalization in your Meta and Google account settings.
What we don’t do
We don’t sell or rent your personal information, and we don’t send marketing texts without your separate consent.
Your choices
You can ask us to access, correct or delete your information, or to take you off the waitlist, by emailing hello@opuscaviar.com. You can remove saved addresses and cards yourself in Account. California residents have these rights under the CCPA.
Contact
Opus Caviar LLC · San Francisco, California · hello@opuscaviar.com