Legal Agreements

1. Information Collection

To provide our neighborhood marketplace and ensure regulatory compliance, we collect:

Personal Identifiers: Legal name, email address, phone number, and physical neighborhood address (required for geofencing and delivery).

Financial & Tax Data: Payout handles (Venmo/Zelle), transaction history (Gross Sales vs. Purchases), and Taxpayer Identity (SSN/EIN) for users exceeding IRS or state reporting thresholds.

Usage & Device Data: IP address, device identifiers, and "Cookies" or tracking pixels used to measure app performance and deliver relevant neighborhood advertisements.

Connected Social & Page Data: If you choose to link your Facebook Page or Messenger account, we collect basic page profile details, page identifiers, message metadata, and comment text necessary to execute auto-posts and auto-responses. We only fetch and process this data when explicitly authorized by you.

Listing Content: Photos and descriptions of your produce used for tax categorization and platform safety monitoring.

2. Data Usage & Third-Party Sharing

We use your data to operate the marketplace and grow our community:

Service Operations: To facilitate netting, payouts, and neighborhood deliveries.

Mandatory Retention: We are legally required to retain transaction records and Taxpayer Identity for seven (7) years for audit purposes.

Social Automation Processing: When utilizing the Page Auto-Responder, message content is processed in real-time solely to match customer questions with active inventory databases and generate automated responses. We do not permanently store or cache private message content in our long-term logs, and we never share Messenger data with third-party advertising brokers.

No Marketing Tracking or Sharing: We do not share your personal identifiers, transaction data, or hashed credentials with third-party advertising networks or platforms for marketing, behavioral targeting, or lookalike tracking.

Safety & Inactivity: We monitor login timestamps to execute the 90-Day Force-Sweep of inactive accounts.

3. Teen Safety & COPPA Compliance

CasaGrown is a family-oriented platform, but we take the privacy of minors seriously:

Under 13: We do not knowingly collect or store data from children under the age of 13. If we discover a user is under 13, the account will be immediately deleted.

Teens (13–17): Data collected from minor users is strictly used for platform operations and safety. We do not sell or lease the personal data of known minors to third-party advertisers for behavioral targeting.

4. Your Rights & Choices

Depending on your location (e.g., California, Texas, or Virginia), you have the right to:

Access & Export: Request a copy of the data we hold about you.

Deletion: Request that we delete your account (subject to our 7-year legal tax retention requirement).

Opt-Out & Preferences: We do not perform third-party tracking, profiling, or behavioral advertising. You can manage notification and location permissions directly in your account settings.

5. Connected Social Services & Data Deletion

Control Over Connections: You have absolute control over your connected third-party integrations (such as Facebook Pages or Messenger bots). You can disconnect these integrations instantly via your CasaGrown Account Settings or directly from your Facebook Business Integrations page.

Immediate Data Purge: When you disconnect your Facebook Page, all associated page access tokens, page preferences, and transient message metadata are instantly and permanently purged from our active databases.

Data Erasure Requests: If you wish to submit a formal request for complete data deletion of all personal and social data collected by the Platform, you may do so at any time by emailing privacy@casagrown.com. Requests will be fulfilled within thirty (30) days, subject to our legally mandated tax and transaction retention requirements.