Privacy Notice
Chowvoy · New Mexico Red LLC
Last updated: November 9, 2026
Who we are
New Mexico Red LLC (San Diego, CA, USA) operates Chowvoy and is the data controller for personal data processed through the Service. Contact: hello@newmexicored.com.
What we collect and why
- Account data (email, display name, sign-in details) — to create and secure your account (contract).
- Receipts, photos and reviews you upload, including restaurant, items, delivery service and delivery time — to verify orders, score dishes and award ChowPoints (contract).
- Restaurant owner details (name, phone, email, restaurant info) — to review ownership claims and run the Merchant Portal (contract, legitimate interests).
- Usage data (pages viewed, order-link clicks, device and browser info, IP address) — to run, secure and improve the Service and prevent fraud (legitimate interests). IP addresses are also used, in hashed form, to limit automated lookups.
- Support messages — to answer your questions (legitimate interests).
- Subscription records (plan, status, billing period, Stripe customer reference) — to provide Pro Analytics (contract, legal obligation). We do not receive or store full card numbers.
Who we share it with
- Stripe, our payment processor, for checkout, subscription management, payments, tax calculation and invoicing. Stripe handles your card details under its own Privacy Policy.
- Service providers who host and operate the Service for us (cloud hosting and database, AI processing of receipt images, maps and place data).
- Professional advisers (legal, accounting).
- Authorities, where required by law.
Public scores show only aggregated data and inspector ranks — never your email or name.
Retention
We keep account data while your account is open, and receipts and reviews while they support published scores. Billing records are kept as long as tax law requires. Data that is no longer needed is deleted or anonymised.
Your rights
Depending on where you live (including under the California Consumer Privacy Act and, for UK/EEA users, the GDPR), you may request access to, correction, deletion, restriction or a portable copy of your data, object to processing, and withdraw consent. We do not sell personal data. Email hello@newmexicored.com; we respond within 30 days. You may also complain to your local data protection authority.
International transfers
We are based in the USA. If you use the Service from the UK or EEA, your data is transferred to the USA under appropriate safeguards such as Standard Contractual Clauses.
Security
We use encryption in transit, access controls and row-level database permissions so users only see their own private data.
Cookies and local storage
We use essential browser storage to keep you signed in and remember an order you are waiting on. We use privacy-friendly first-party analytics; we do not use advertising cookies. You can clear storage in your browser settings.
Changes
We will update the date above when this notice changes.