Last updated: June 4, 2026
This Privacy Policy explains how Cornucopia Foundation ("Cornucopia," "we," "us," or "our") collects, uses, shares, and protects information in connection with the Cornucopia platform (the "Platform"), which provides software for farmers markets, market operators ("Market Operators"), and vendors ("Vendors") to manage operations, applications, scheduling, compliance, communications, and payments. By using the Platform, you agree to this Policy and to our Terms of Service.
Information you provide. Account and profile details (such as name, business name, email, phone number, and password); vendor or market applications and supporting documents (such as licenses, permits, certificates of insurance, and product information); listings, schedules, attendance, sales figures, load sheets, and other operational data you enter; messages and support requests; and payment-related details you submit through our payment processors.
Information collected automatically. Device and usage data such as IP address, browser and device type, pages and features used, timestamps, and diagnostic and performance data. If you use our mobile or tracking application and grant permission, we may collect location information to support attendance and on-site features. We use cookies and similar technologies as described in Section 5.
Information from third parties. We may receive information from Market Operators or Vendors about you (for example, when an operator adds a vendor), and from service providers such as payment processors (e.g., transaction and verification status) and authentication or analytics providers.
We do not sell your personal information. We share information only as needed to operate the Platform:
We may share aggregated or de-identified information that cannot reasonably be used to identify you.
Payments are processed by third-party payment processors, including Stripe and Square. When you provide payment details, they are collected and handled by those processors under their own terms and privacy policies. We do not store full payment card numbers on our own servers; we retain limited information such as transaction records and card metadata (for example, the last four digits and status) needed to administer billing, refunds, and disputes.
We use necessary browser storage to keep users signed in, protect accounts, remember interface preferences, and maintain secure sessions. With your consent, we may also use optional diagnostics tools — including error monitoring, performance tracing, and session replay — to understand bugs and improve reliability. You can decline optional diagnostics and continue using the Platform, and you can change your choice at any time through the in-app diagnostics preference.
We retain information for as long as your Account is active and as needed to provide the Services, and thereafter as necessary to comply with our legal, tax, accounting, and regulatory obligations, resolve disputes, prevent fraud, and enforce our agreements. When information is no longer needed, we delete or de-identify it.
We take reasonable administrative, technical, and physical measures designed to protect your information from loss, theft, misuse, and unauthorized access. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to be free from discrimination for exercising those rights; we do not sell or share personal information for cross-context behavioral advertising. To exercise any right, contact us using the details below. We may need to verify your identity, and some information may be controlled by a Market Operator, in which case we will direct your request appropriately.
Communications. You can opt out of marketing emails using the unsubscribe link, and out of SMS by replying STOP. We may still send transactional or operational messages necessary to provide the Services.
The Platform is intended for businesses and adults. It is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.
The Platform may link to or integrate with third-party services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.
We operate in the United States. If you access the Platform from outside the United States, you understand your information will be processed in the United States, where data protection laws may differ from those in your jurisdiction.
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Platform or by other reasonable means and update the "Last updated" date above. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.
If you have questions about this Privacy Policy or our data practices, contact us at malibufarmersmarket@cornucopiafoundation.net.