Privacy Policy

Two ideas guide this policy. First, we collect what the marketplace needs to work: your account, your profile, your listings, and what you choose to share. Second, anything that could identify where you live or how to reach you privately is kept out of public pages and is visible only to you and, where needed, our admin team.

• Account information: your name, email address, and password (stored as a secure hash), plus the plan your account is on.
• Profile and listing details: the business or market name, story, description, town, hours, photos, products, prices, and schedule information you choose to publish, along with the categories that fit you.
• Contact details: the public contact email and phone you publish, and the private contact email we use to reach you. Private contact details are stored separately and are never served to the public. See "Contact details and location privacy" below.
• Messages: the messages you send and receive through in-app threads with vendors, organizers, or our admin team, including "Get help" support requests.
• Hearts and saved items: the vendors you follow, the products and events you save or heart, your recently viewed items, and your Save a Spot signups. This is what powers your saved lists and the updates you get.
• Reviews: the star rating, your written review (up to 500 characters), the profile or event you reviewed, and your display name so other shoppers can see it is a real person. New reviews are held for moderation before they appear.
• Preorder requests: your name, email, optional phone, the items and quantities you requested, and the direct payment method you chose (cash, Venmo, Cash App, or Zelle). Payment happens directly with the vendor.
• Events and markets: event details you create, applications you send or receive as a vendor, invitations, attendance lists, and check-ins.
• Subscription and billing records: your plan, its status, renewal or trial end dates, and the Stripe identifiers we use to manage it. See "Payments and Stripe" below.
• AI usage: your Hired Hand conversations and how many assistant turns you have used, and the logo image you submit if you run Auto-style.
• Community-aid details: if you claim or create a More Than Enough listing, the organization name, address, hours, requirements, and contact details you publish, plus any surplus food posts, donation needs, or volunteer needs you create.
• Usage data: pages visited, profile views, website and order-link clicks, and basic device and browser information, used to run the marketplace and to give vendors and markets honest analytics about their own pages.
• Error and crash reports: when the app hits an error we log the message, the page you were on, and browser information so we can fix it. If you are signed in, your user id and email are attached. These reports are visible only to our admin team.

Private contact details. An email address you give us for account and contact purposes is stored in a private record that is not part of your public profile. It is used to reach you about your account, your applications, your events, and billing, and it is readable only by you and our admin team. Public contact details are the ones you choose to publish.

Exact location vs. town only. When you save a profile with coordinates, you choose how precisely it appears:

• Exact: the public map shows your real pin, and a street address if you also choose to show one.
• Town only: the public map shows your town, with the pin placed at the town center. This is the default, so a home address is never broadcast.
• Approximate: a pin you place yourself, near but not on your property.
• Public spot: a pin at a stand, locker, or market booth where you actually meet customers.

Your exact coordinates are kept for your own records and are only shown publicly when you choose the exact mode. The county used for our listing pages is filled in from your coordinates.

• To create and manage your account, profile, listings, and events.
• To show your profile, listings, and events to shoppers and to help people find each other on the map.
• To run your saved lists: the vendors you follow, the products and events you heart, and what you have recently viewed.
• To pass along preorder requests, vendor applications, event messages, reviews, and support requests to the right person.
• To send service notifications about your account, applications, invitations, messages, and billing.
• To track and credit referral rewards and free Pro months on your account.
• To moderate reviews and content, enforce our Community Guidelines, and prevent fraud or abuse.
• To manage subscriptions, trials, renewals, cancellations, and failed payments.
• To power the optional Hired Hand assistant and Auto-style, which read only your own account data.
• To give vendors and markets analytics about their own pages, and to improve site performance.
• To find and fix errors and crashes.

Our weekly "what's fresh" email is a separate, opt-in list. If you join it, we store only your email address and, optionally, the town or ZIP you typed in, along with the date you agreed and the page you signed up from. We use it to send that email and nothing else. Every email has a one-click unsubscribe link, and you can also ask us to remove you. Our admin team is the only group that can read the list.

Subscription payments are processed by Stripe, Inc. Your card number is entered on Stripe's own checkout page, is handled by Stripe under its privacy policy, and is never stored on our servers. What we keep is your plan, its status, the dates of your trial, renewal, or cancellation, and the Stripe identifiers needed to manage your subscription and show you the right numbers in your dashboard.

Sales between customers and vendors, including preorders and stall or booth fees, happen directly between those people. We do not process those payments and never collect card details for them.

Hired Hand is an optional assistant included with Pro, and Auto-style is a profile customization tool that uses your logo to suggest colors and fonts.

• What it reads: Hired Hand reads your own account data, such as your profile, listings, events, reviews, and orders. It does not read other users' private data.
• What is sent: the text of your prompt and the account data needed to answer it, or for Auto-style the logo image you submit, are sent to our AI provider to generate the response.
• What we store: your conversation history is stored with your account so you can revisit it, and we count the assistant turns you use. You can start a new conversation at any time.
• No training: our AI provider does not use your prompts or data to train its models.
• Your responsibility: do not put sensitive personal, financial, or confidential business information into a prompt, and review anything drafted for you before publishing it.

We use a small number of cookies and browser storage entries to keep you signed in, to remember your settings such as your chosen text size and map preferences, and to understand in aggregate how the site is used so we can improve it. We do not use cookies for third-party advertising, and we do not sell data collected this way.

You can control cookies through your browser settings, including blocking or deleting them. If you block the ones that keep you signed in, some features will not work until you sign in again.

• Stripe processes subscription payments and holds the billing relationship for your plan.
• Facebook (Meta) is involved only if you connect a Facebook Page, in which case we receive your Page name and recent posts to show on your profile. You can disconnect at any time.
• Our AI provider processes your prompts and the related account data to generate a response.
• Other users see only what you publish publicly, plus anything you send them directly, such as a message, an application, or a preorder request.

We do not sell or rent your personal information. We may disclose limited information when the law requires it, or when it is needed to protect the rights, safety, or integrity of our community.

We keep your information while your account is active, and as long as needed to provide the service. Some records are kept longer where the law requires it or where we have a legitimate business reason, such as billing and tax records, fraud prevention, and moderation history.

You can ask us to delete your account and personal data at any time, and you do not need to live in any particular state to do so. There are two ways:

• In the app: vendors and organizers can use the "Delete account" option in the dashboard.
• By email: write to morethancornmarket@gmail.com with the subject "Account Deletion Request," from the address on your account.

When your account is deleted, we remove:

• Your profile and all of its content, including your story, photos, hours, and the contact details we held privately.
• Your listings, menus, recipes, and experiences.
• Your saved items, hearts, follows, and Save a Spot signups.
• Your conversations, message threads, support requests, and event applications.
• Your events, market schedule entries, and slot requests, along with your Lounge posts and replies.
• Your More Than Enough listings and any surplus, donation, or volunteer posts you created.
• Your referral code, referral history, and any remaining free Pro balance.
• Your account credentials and login.

We may keep the following:

• Reviews you wrote, so other shoppers keep honest context, with attribution handled so your identity is not exposed.
• Billing and transaction records held by Stripe, and records we must keep for tax, accounting, or legal reasons.
• Aggregated or anonymized analytics that can no longer be linked to you.
• Error reports, for a period, with your identity removed where possible.

We complete verified deletion requests within 30 days. If you connected a Facebook Page, you can disconnect it at any time from your dashboard, which stops further post retrieval; cached posts are removed when you disconnect or delete your account.

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

You can see and correct most of your information directly in your dashboard, and you can unsubscribe from the weekly email with the link in any email. You may also ask us to access, correct, or delete your personal information, and Iowa residents may have additional rights under state law. To make a request, email morethancornmarket@gmail.com.

We may update this policy from time to time. When we do, we change the "Last updated" date at the top of this page, and the footer of every page links to the current version. If a change is significant, we will make it clear on the site.

Questions about this policy, or about your data? Email morethancornmarket@gmail.com, or write to Northeast Iowa Main Streets LLC, Iowa, United States.