Privacy notice

What we collect

• To place an order: your first name, mobile number, optional email, cart contents, chosen pickup time, and any note you add at checkout.
• So the truck can reach you: your mobile number and first name are shared with the vendor and stored for the life of the order and up to 30 days after collection for dispute resolution, then deleted.
• If you pay online: for trucks that turn on online prepay, your card payment is processed by Stripe. QueueZero never sees or stores your full card number; we keep only the payment status and Stripe's reference so the order and any refund can be reconciled.
• Loyalty (if a truck runs a stamp card): we count your visits using a one-way hash of your mobile number, never the number itself, so a returning customer is recognised without us storing the number. We also keep a short snapshot of your last order at that truck so you can reorder it.
• If you opt in to updates: a browser push subscription (a device token, not your identity) so we can tell you when your order is ready, and your email if you ask for email updates.
• Vendor accounts: business name, email, phone, ABN and GST status if supplied, trading location if published, menu and logo images you upload, and (for paid plans or online prepay) billing and payout details held by Stripe.
• Technical: IP address, browser, and page views. Analytics only run after you accept the cookie banner.

Why

To run the ordering platform, take payment where a truck has enabled it, notify you when food is ready, bill vendors for their subscription, prevent abuse, and improve the product.

Your rights under the Privacy Act 1988 (Cth)

You can request access, correction, or deletion of your data at any time. Contact hello@day-zero.com.au. We respond within 30 days.

Sharing

Your name, phone, order contents, and any checkout note are shared with the vendor you ordered from so they can prepare and hand over your food. That is the only sharing of your order details. We use a small set of processors to run the service: Neon (database) and Vercel (hosting), both in Australian regions; Stripe (payments, when a truck enables online prepay, and vendor subscription billing); and Resend (email updates, if you opt in). Our support team may access a vendor account to investigate an issue; every such access is recorded in an internal audit log and disclosed below.

Payments

When a truck enables online prepay, the truck is the seller and merchant of record; Stripe is the payment processor and handles your card data directly under its own privacy terms. QueueZero charges no fee on your order. Vendor subscription payments are also processed by Stripe.

Retention

• Customer name and phone on an order: the life of the order plus up to 30 days for disputes, then deleted.
• Order records (for the vendor's business records): up to 12 months.
• Payment records: as required for tax and accounting (held by us and by Stripe).
• Vendor accounts: for the life of the account, deleted on request.

Support access & impersonation

To resolve a support issue, an authorised QueueZero admin may temporarily access a vendor account ("log in as"). Every such session is time-limited, requires the admin's own login, and is written to an append-only audit log. It never exposes customer card data.

Data controller

QueueZero is a product of Day Zero Solutions, an Australian sole trader. Personal data we control is stored in Australian data-centre regions. Payment data is handled by Stripe under its own terms.