Privacy Policy
Plenty Plates is a catering marketplace, so it holds two kinds of account: customers who place orders, and restaurants that fill them. This page says what we keep about each, who we share it with, and why.
Effective 9 October 2026
Updated 26 October 2026
Plenty Plates is operated by Croftware LLC, a California company (“Plenty Plates”, “we”, “us”)
Applies to Plenty Plates at plentyplates.com, including its restaurant console
Who we are
Plenty Plates is operated by Croftware LLC, a California company. For anything in this policy, including formal notices, write to support@plentyplates.com.
Customer accounts
To place an order you create an account with your email address, your name and a password. Sign-in is handled by our authentication provider, Supabase; your password is stored by that provider in hashed form, and we cannot read it.
Orders
An order stores what you ordered (the items and quantities), the event date and time, the delivery address if the order is delivered, the headcount, any dietary needs you list, and any notes you add. These details are shared with the restaurant filling the order, together with your name and the contact details it needs to prepare and hand over the food. They are not shared with other restaurants.
Payments
Payments are processed by Stripe. You enter your card details into Stripe's own payment form; we never see or store full card numbers. At checkout your card is held, not charged, and it is charged only when the restaurant accepts the order. We keep a record of the payment's status and amount, and Stripe may show us limited card details such as the brand and last four digits.
Hearing when we open
If you leave your email to hear when we open, we use it only to tell you we have opened, and you can ask us to remove it at support@plentyplates.com.
Restaurant accounts
A restaurant account stores the business details the restaurant gives us (such as its name, address and contact details), its menu, and the email address and password of the people who sign in to the restaurant console. A restaurant's menu and public business details are shown to customers. Payout details are collected and held by Stripe through Stripe Connect; we see the status of the restaurant's Stripe account, not its bank account numbers.
Text message alerts
A restaurant's owner may give a mobile number to receive order alerts by text. Text alerts are optional and off until the owner turns them on in the restaurant console, ticks a consent box, and confirms the number with a code sent to it. The text alerts page shows that step by step.
- What we store: the mobile number, the time consent was given, and the wording of the consent the owner agreed to. We also record when alerts are turned off, including by a STOP reply.
- How texts are sent: through Twilio, which delivers the messages on our behalf.
- What the texts are: transactional order alerts only: new orders, reminders to respond, and day-before order reminders for that restaurant. No marketing is ever sent by text.
- Stopping: turn text alerts off in the restaurant console, or reply STOP to any message. Reply HELP for help.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Text message opt-in data and consent will not be shared with any third parties, except the providers that deliver the messages on our behalf.
Emails about your account and your orders, such as order confirmations and restaurant order alerts, are sent through Resend. These emails are about your account and your orders.
Service providers
These companies process data on our behalf to run Plenty Plates. Each is permitted to use it only to provide its service to us.
| Supabase | Database and sign-in |
|---|---|
| Stripe | Payments, and restaurant payouts through Stripe Connect |
| Twilio | Text messages |
| Resend | |
| Vercel | Hosting |
What we do not do
- We do not run advertising on Plenty Plates.
- We do not sell or rent your personal information, and we do not share it for advertising.
- We do not track you across other companies' apps or websites.
- We do not send marketing by text message.
Beyond the restaurant filling your order and the service providers above, we would disclose data only if legally required to.
Keeping and deleting data
We keep account and order data while your account is open, and order and payment records for as long as we need them for accounting, tax and legal obligations. To delete your account or ask what we hold, write to support@plentyplates.com. Records we are required to keep, such as completed payments, may be retained after deletion for that purpose only.
Children
Plenty Plates is not directed at anyone under 18. Its customers are adults ordering food for events, and its restaurant users are businesses. We do not knowingly collect personal information from anyone under 18.
Your rights
If you live in California, the CCPA, as amended by the CPRA, gives you the right to know what personal information we collect and how we use it, to access it, to correct it, to delete it, and to opt out of its sale or sharing, which we do not do. You will not be discriminated against for exercising these rights. Write to us and we will act on any of them; we may need to confirm your identity first.
Changes
If this policy changes in a way that affects what we collect or who can see it, we will update this page and change the effective date at the top.
Contact
Questions about this policy: support@plentyplates.com
Plenty Plates, California, United States.