EXPRESSO LEGAL
Privacy Policy
Effective September 17, 2026
This policy explains how Expresso handles information submitted through our New York City founding waitlist and retailer partnership form. Expresso is a pre-launch service and is not yet accepting retail or delivery orders.
Information we collect
For waitlist signups, we collect your first and last name, email address, phone number, NYC neighborhood, selected favorite stores, optional consent to receive launch text messages, the privacy-policy version you accepted, and the time of signup. For retailer partnership requests, we collect the contact, business, location, product, inventory, order-preparation, courier-pickup, return-policy, ecommerce, and optional notes information you submit. We also collect first-party product analytics such as a random visitor ID, session ID, timestamp, referral source, campaign, landing page, retailer and product-preview interactions, and form events. We process a one-way hash derived from your network address for short-term abuse prevention; we do not store the raw address in our application tables.
How we use it
- To operate the waitlist, assign a founding position, and deliver launch or early-access updates.
- To understand which NYC neighborhoods and retailers prospective customers want first.
- To evaluate retailer partnership requests and contact applicants about potential next steps.
- To understand acquisition sources and interactions with illustrative product previews.
- To prevent duplicate submissions, spam, and abuse.
- To comply with legal obligations and protect the service.
Email and text messages
We may email you about your waitlist status and launch. We send marketing or launch text messages only if you check the optional SMS box. Consent to texts is not a condition of joining. Message and data rates may apply. You can opt out of texts by replying STOP or contacting us.
Service providers and AI
The waitlist is hosted using OpenAI Sites infrastructure and Cloudflare services, including a private server-side database. These providers process information for hosting, security, analytics storage, and database operations. The current waitlist does not send form responses to an AI model, advertising network, third-party analytics tracker, or public spreadsheet.
Sharing and sale
We do not sell your waitlist information. We disclose it only to service providers acting for us, when required by law, to protect rights and safety, or as part of a business transaction subject to appropriate safeguards.
Retention and deletion
We plan to keep waitlist records until the waitlist program ends and for up to 12 months afterward. We retain partnership applications while we evaluate and administer potential retailer relationships and for a reasonable period afterward, unless a longer period is required for legal or security reasons. To request access, correction, or deletion, email support@espressoshopping.com. We will verify the request before acting.
Security
We use server-side storage, encrypted HTTPS transport, validation, rate limiting, restricted database access, and security headers. No online service can promise absolute security, but we review safeguards and limit access to the information needed to operate the waitlist.
Children and geography
The waitlist is intended for people age 13 or older in the United States and is currently focused on New York City. We do not knowingly collect information from children under 13.
Changes and contact
We may update this policy as the product and vendors change. Material changes will be posted here with a new effective date. Questions can be sent to support@espressoshopping.com.