This Privacy Policy describes how Kobop (operated by Sigma Tech, “we,” “us,” or “our”) collects, uses, and shares information about you when you visit koboprva.com(the “Site”) or use the Kobop mobile app (the “App”). By using the Site or App, you agree to the practices described here.
1. Information we collect
We collect information you provide directly, information collected automatically, and information from third parties that help us run the business.
Information you provide
- Account details — name, email, phone (optional), and password when you create an account.
- Order details — items, shipping or pickup address, special instructions, and contact info at checkout.
- Catering inquiries — name, email, event details you submit through the catering form.
- Payment details — handled directly by Stripe; we never see or store full card numbers.
- Communications — support emails, social messages, or feedback you send us.
Collected automatically
- Device + log data — IP address, device model, OS version, browser, referring page, and timestamps.
- App-only — push-notification tokens (if you enable notifications), crash diagnostics.
- Cookies and similar — session cookies for sign-in and cart, plus a small set of strictly-functional cookies.
From third parties
- Sign-in providers (Google) — your name, email, and profile picture if you choose to sign in with them.
- Payment processor (Stripe) — order status, fraud signals, refund events.
- Email delivery (SMTP2GO) — bounce / delivery status of order confirmation emails we send to you.
2. How we use information
- Process orders, payments, refunds, and pickups or shipments.
- Provide customer support and respond to your inquiries.
- Send transactional messages (order receipts, shipping updates, account security).
- Send promotional messages or push notifications when you opt in (you can unsubscribe at any time).
- Maintain security, prevent fraud, and enforce our terms.
- Improve the Site and App — fix bugs, measure feature usage, plan menu and merch updates.
- Comply with legal obligations (tax records, accessibility, etc.).
3. How we share information
We do not sell your personal information. We share it only with parties that help us run the business:
- Stripe — payment processing.
- SMTP2GO — transactional email delivery.
- Twilio / SipStation — SMS delivery if enabled.
- Hosting + infrastructure providers — AWS, our staging environment, and CDN partners.
- Service partners with shared customers — e.g. Toast (for in-store loyalty integration if and when it is enabled).
- Legal & safety — law enforcement, regulators, or in response to valid legal process when required.
- Business transfers — successor entity in the event of a merger, acquisition, or sale of assets, with notice to you.
4. Mobile app permissions
- Push notifications — opt-in. Used for order updates and (if you opt in) promotions.
- Camera / photos — only when you choose to upload a photo (e.g. attach to a support inquiry). Not used otherwise.
- Location — only when you tap “Find us” or open the Map. We do not track location in the background.
5. Data retention
We keep account and order data for as long as your account is active and as needed to comply with legal, accounting, or reporting obligations (typically 7 years for tax records). Anonymized analytics may be retained longer. You may request deletion of your account at any time (see §8).
6. Security
We use industry-standard safeguards: HTTPS for all traffic, encrypted secrets at rest, scoped access controls for staff, and offsite database backups. No system is perfectly secure — please use a strong, unique password and tell us right away if you suspect your account has been accessed without permission.
7. Children’s privacy
The Site and App are intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we’ll delete it.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of marketing communications. To exercise any of these rights, email koboprva@gmail.com. We’ll respond within 30 days.
- Marketing opt-out — every promotional email has an unsubscribe link; push notifications can be turned off in your device settings or the App’s account screen.
- Account deletion — sign in and request from the account screen, or email us. We may retain limited records as required by law (tax, dispute resolution).
- Cookies — your browser lets you block or delete cookies; turning off strictly-functional cookies will break sign-in and the cart.
9. International users
Kobop is operated from Virginia, USA. If you access the Site or App from outside the U.S., your information will be processed in the U.S. under U.S. law.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be highlighted in the App and on the Site.
11. Contact
Questions or requests? Email koboprva@gmail.com or write to:
Kobop / Sigma Tech
5047 Forest Hill Ave
Richmond, VA 23225
United States