SnackHoot Privacy Policy

Last updated: November 2, 2026 · See also our Terms and Conditions.

This Privacy Policy explains how Plus One Technologies Inc. ("Plus One," "SnackHoot," "we," "us") collects, uses, and shares information when you use the SnackHoot Vending Network website and app at snackhoot.com (the "Platform"). It applies to Buyers (people who find machines and buy snacks), Vendors (independent machine operators), and visitors.

1. Information we collect

From Buyers:

• Email address, if you sign in. We send a one-time sign-in code to it. We don't use passwords for Buyer accounts.
• Purchase history: the machine, slot, item, price, payment method type (for example "card"), order status (paid, vended, failed, refunded), and timestamps.
• Saved card references, if you choose to save a card. Stripe stores the card; we keep only Stripe's customer reference and the card's brand and last 4 digits, which we display to you.
• Location, only if you choose to use it. If you tap "near me," your browser shares your approximate location. It is used to find nearby machines and is not saved to your account. If you type a place to search, that text is sent to the OpenStreetMap Nominatim service to look up its location.
• Restock alerts you send for a machine slot (machine, slot, reason, time). These are not linked to your account.

From Vendors (and people applying to become Vendors):

• Business name, contact name, email, phone, city or region, and country.
• Machine details (location, make and model, controller, payment methods), inventory, prices, and sales data.
• Stripe account status (for example whether card payments and payouts are enabled). Identity, tax, and bank details for payouts are collected by Stripe directly during Stripe Connect onboarding. SnackHoot doesn't see or store them.

From everyone (device and usage information):

• Technical logs created when your device contacts the Platform, such as IP address, browser and device type, pages and API requests, time, and error messages. Our hosting provider keeps these for a short period. For owner sign-in security we keep a one-way hash of the IP address of failed sign-in attempts.
• Information stored on your own device: the app may store restock alerts you sent and sign-in progress in your browser's local or session storage, and it may cache app files offline. This stays on your device.

2. How we use information

• To provide the Platform: show machines and stock, process purchases, send vend commands, and issue automatic refunds when a vend fails.
• To sign you in with email codes and keep your session secure.
• To let you save cards and see your order history.
• To set up and support Vendors, including Stripe Connect payouts, billing, and restock alerts.
• To prevent fraud and abuse, keep the Platform secure, and fix problems.
• To meet legal, tax, and accounting obligations, and to enforce our Terms.
• To contact you about your account, orders, or Vendor sign-up. We don't send marketing email without your permission.

3. Payments and Stripe

• Card, Apple Pay, Google Pay, Link, and Cash App Pay payments are entered on Stripe's secure pages and processed by Stripe, Inc. Card details go directly to Stripe. SnackHoot never receives or stores full card numbers or security codes.
• Saved cards are stored by Stripe as payment methods on a Stripe Customer record. We keep only the Stripe reference, card brand, and last 4 digits.
• Purchases from a Vendor's machine may be processed on that Vendor's own Stripe account, so Stripe and that Vendor receive the payment details needed for that transaction.
• Stripe Connect collects Vendors' identity, business, tax, and bank information under Stripe's own privacy policy (stripe.com/privacy).
• Cash App Pay is provided through Stripe together with Block, Inc. (Cash App). PayPal and Venmo are coming soon. When available, payments made with them will be handled by PayPal on its own pages. Each of these companies handles your information under its own privacy policy.

4. Service providers

We use trusted providers to run the Platform. They may process information for us only to provide their services:

• Vercel, Inc.: website and app hosting, and request logs.
• Supabase, Inc.: database and email-code sign-in (authentication).
• Brevo (Sendinblue SAS): delivery of sign-in code emails.
• Stripe, Inc. (and Cash App through Stripe): payments, saved cards, Vendor payouts.
• PayPal, Inc.: PayPal and Venmo payments, once available.
• OpenStreetMap Foundation: map tiles (loaded by your browser, which shares your IP address with it) and place search.

5. How information is shared

• With Vendors: a Vendor sees what it needs to run its machines and handle orders, such as items sold, amounts, order and vend status, refunds, and restock alerts for its machines. We don't give Vendors your email address or saved card details. When a sale is processed on the Vendor's Stripe account, Stripe gives the Vendor the transaction details it normally provides to a merchant (for example the card brand and last 4 digits, and any details needed to handle a dispute).
• With service providers listed above, to run the Platform.
• For legal reasons: if required by law, subpoena, or court order, or to protect the rights, safety, and property of our users, the public, or Plus One.
• In a business transfer: if Plus One is involved in a merger, acquisition, or sale of assets, information may be transferred under this Policy.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Cookies and similar technologies

We use only strictly necessary cookies:

• Customer sign-in session cookies: a short-lived access cookie of about one hour, and a refresh cookie of up to 30 days.
• Vendor sign-in session cookies: separate from customer cookies.
• Owner and staff console session cookies: up to 12 hours.

These cookies are secure, HTTP-only, and first-party, and they are used only to keep you signed in. We don't use advertising cookies, ad trackers, or third-party analytics. Stripe's and PayPal's checkout pages may set their own cookies for payment security and fraud prevention when you use them.

7. Retention

• Account information: kept while your account is active and deleted on request (see Section 10), unless we must keep it.
• Purchase, refund, payout, and billing records: kept as long as needed for accounting, tax, fraud prevention, and dispute purposes (generally up to 7 years).
• Vendor sign-up applications: kept while we evaluate and support your application, then deleted on request.
• Sign-in codes expire quickly and can be used only once. Hosting logs are kept for a short period set by our hosting provider.

8. Security

We use HTTPS everywhere, secure HTTP-only cookies, one-time sign-in codes, signed links, hashed credentials, database access controls, and hosted payment pages, so card data never touches our servers. No system is perfectly secure, so please protect access to your email account and tell us right away about any suspected misuse.

9. Children

The Platform is not directed at children under 13, and we don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.

10. Your choices and rights

• Access and correction: ask for a copy of your information, or ask us to correct it. Vendors can update listing and inventory details through their connected machine or by contacting us.
• Deletion: ask us to delete your account and personal information. You can also remove saved cards yourself on your Account page.
• Opt-out: you can choose not to share location, not to sign in, or not to save a card. We don't sell or share personal information for targeted advertising, so there is nothing to opt out of there. You can also unsubscribe from any non-essential emails.
• California and other U.S. state privacy rights: depending on where you live (for example California under the CCPA/CPRA, or Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others), you may have the right to know what personal information we collect and how we use and disclose it, to access, correct, delete, and receive a portable copy of it, to opt out of its sale, sharing, or use for targeted advertising (we don't do these), and not to be discriminated against for using your rights. You can use an authorized agent. We'll verify your request, usually through your sign-in email, and respond within the time the law requires. If we deny your request, you may appeal by replying to our decision.

11. How to request access or deletion

Email us at plusonetechnologiesinc@gmail.com from the email address on your account, with the subject "Privacy request" and what you'd like us to do (access, correct, or delete). Vendors should include their business name. We may need to confirm your identity before acting. Stripe-held information (for example Vendor bank and identity details) can also be requested from Stripe directly.

12. Changes to this Policy

We may update this Policy. We'll post the new version here with a new "last updated" date and give notice of important changes (for example by email or in the app).

13. Contact

Plus One Technologies Inc. (SnackHoot Vending Network)

Owner: William Altig

Email: plusonetechnologiesinc@gmail.com

Mailing address: 4 NE 10th St, Suite 257, Oklahoma City, OK 73104