PrIvacy policy
Last updated: June 22, 2026
This Privacy Policy describes how Digital Eats Inc. d/b/a Catapult (“Catapult”, “we”, “our” or “us”) collects, uses, and discloses information in connection with www.ordercatapult.com (the “Site”), any related websites, domains, sub‑domains, mobile applications, and technology products (together with the Site, the “Platform”), any hardware products (the “Products”), and the services, features, content, applications, and other products we offer (together with the Platform and the Products, the “Services”). When you use or access the Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.
What Does This Privacy Policy Cover?
This Privacy Policy covers how we treat information that identifies or relates to a particular individual and information referred to as “personally identifiable information,” “personal information,” or “sensitive personal information” under applicable data privacy laws, rules, or regulations (collectively, “Personal Information”) gathered when you use or access the Services.
This Privacy Policy does not apply to the practices of third parties that we do not own or control, including any third‑party websites, services, and applications (“Third‑Party Services”) that you choose to access through the Services, or to individuals that we do not manage or employ. While we try to facilitate access only to Third‑Party Services that share our respect for your privacy, we are not responsible for the content or privacy policies of those Third‑Party Services. We encourage you to carefully review the privacy policies of any Third‑Party Services you access.
What Happens When There Are Changes to this Privacy Policy?
We may amend this Privacy Policy from time to time. The use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we make material changes in the way we collect or use information, we will notify you by posting an announcement on the Services or by sending you an email. When we make changes, we will revise the “Last updated” date at the top of this Privacy Policy. We encourage you to review this Privacy Policy whenever you visit the Platform. Unless applicable law requires your affirmative consent, you will be bound by any changes to this Privacy Policy when you use the Services after those changes have been posted. If applicable law requires your affirmative consent, we will request such consent the next time you access the Platform.
What If I Have Questions or Concerns?
If you have any questions or concerns regarding privacy using the Services, please do not hesitate to contact us at support@ordercatapult.com
What Information Do We Collect?
This chart details the categories of Personal Information that we collect and have collected over the past 12 months:
Category of Personal Information (and Examples)
Business or Commercial Purpose(s) for Collection
Categories of Third Parties With Whom We Disclose this Personal Information
Profile or Contact Data such as first and last name, email, phone number, and mailing address
· Providing, Customizing and Improving the Services
· Marketing the Services
· Corresponding with You
· Service Providers
· Parties You Authorize, Access or Authenticate
Payment Data such as bank account information, billing address, phone number, and email.
· Providing, Customizing and Improving the Services
· Service Providers (specifically our payment processing partner, currently Melio Solutions Inc.)
Professional or Employment-Related Data such as job title.
· Providing, Customizing and Improving the Services
· Service Providers
Commercial Data such as purchase history.
· Providing, Customizing and Improving the Services
· Corresponding with You
· Service Providers
· Parties You Authorize, Access or Authenticate
Device/IP Data such as IP address, device ID, and type of device/ operating system/ browser used to access the Services.
· Providing, Customizing and Improving the Services
· Service Providers
Web Analytics such as web page interactions, referring webpage/source through which you accessed the Services, non-identifiable request IDs, and statistics associated with the interaction between device or browser and the Services.
· Providing, Customizing and Improving the Services
· Service Providers
Other Identifying Information that You Voluntarily Choose to Provide such as emails or other communications you send us.
· Providing, Customizing and Improving the Services
· Marketing the Services
· Corresponding with You
· Service Providers
· Parties You Authorize, Access or Authenticate
From What Sources Is Personal Information Collected?
We collect Personal Information when you provide it directly to us (for example, when you sign up for our Services or contact us), and certain Personal Information (such as Device or Web Data) automatically when you use our Services (for example, through Cookies, as described in the “Cookies” section below). We also may collect Personal Information from our third‑party delivery partners, such as DoorDash, Uber Eats, Grubhub, and Postmates.
For What Purposes Is Personal Information Collected?
We collect Personal Information from you to provide, customize, and improve the Services. For example, we may collect Personal Information to process transactions and other billing‑related activities, to provide the services or information you request, to fulfill the reason you provided the information, to improve the Services (including testing, research, internal analytics, and product development), to personalize the Services, Site content, and communications based on your preferences, and to prevent, detect, and address fraud, security issues, and debugging needs.
We may also collect Personal Information to carry out other business purposes described at the time of collection or as permitted by applicable privacy laws, such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020, the Colorado Privacy Act, the Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection Act, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the New Hampshire Privacy Act, the New Jersey Privacy Act, the Nebraska Data Privacy Act, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, or the Virginia Consumer Data Protection Act (collectively, the “U.S. State Privacy Laws”).
In addition, we collect Personal Information to respond to correspondence that we receive from you, to contact you when necessary or when you request it, and to send you information about Catapult or the Services, including emails and other communications according to your preferences.
We may also use your Personal Information, including your email address and phone number, to send you marketing and promotional communications about Catapult’s products, services, and offerings that may be of interest to you. Marketing communications may be delivered by email, telephone call, or text message, including via automated or AI-assisted systems. Where required by law, we will obtain your prior express written consent before sending you marketing communications by phone or text. You may opt out of receiving marketing communications at any time by: (i) clicking the unsubscribe link in any marketing email; (ii) replying STOP, QUIT, CANCEL, UNSUBSCRIBE, or END to any marketing text message; (iii) making a verbal request to opt out during any marketing call; or (iv) contacting us at support@ordercatapult.com to be added to our internal do-not-call list. We will honor all opt-out requests within thirty (30) days. You may also register your phone number with the FTC's National Do-Not-Call Registry at donotcall.gov. Please note that even if you opt out of marketing communications, we may continue to send you non-marketing communications relating to your use of the Services.
We also collect Personal Information to meet legal requirements and enforce legal terms, to prevent, detect, and investigate security incidents and potentially illegal or prohibited activities, to protect the rights, property, or safety of you, Catapult, or others, to respond to claims that any posting or other content violates third‑party rights, and to resolve disputes (collectively, “Legal Purposes”).
We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without first providing you notice or obtaining your consent. We do not collect Personal Information that is classified as “sensitive personal information” under applicable U.S. State Privacy Laws.
How, and With Whom, Is My Information Shared?
We may disclose your Personal Information to service providers that help us provide the Services or perform business functions on our behalf. These include hosting, technology, and communications providers, our kitchen fulfillment partners, third‑party delivery partners, analytics providers for web traffic or usage of our Services, security and fraud‑prevention providers, and support and customer service vendors. We also share your Personal Information with our payment processing partner, Melio Solutions Inc. (“Melio”), which collects your payment card information as necessary to process your payment. Please review Melio’s terms of service and privacy policy for information on its use and storage of your Personal Information.
In addition, we may disclose your Personal Information to parties you authorize, access, or authenticate, such as third‑party services you choose to access through the Services.
What About Data That is Not Personal Information?
We may create aggregated, de-identified or anonymized data from the Personal Information we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and disclose it with third parties for our lawful business purposes, including to analyze, build and improve the Services and promote our business, provided that we will not attempt to reidentify the data and/or disclose such data in a manner that could identify you.
Do the Services Use Cookies?
The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s). Please note that because of our use of Cookies, the Services do not respond to “Do Not Track” from your browser at this time. To find out more about “Do Not Track,” you can visit www.allaboutdnt.com.
We use the following types of Cookies:
· Essential Cookies. Essential Cookies are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our Services. Disabling these Cookies may make certain features and services unavailable.
· Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Services. They do this by collecting information about the number of visitors to the Services, what pages visitors view on our Services and how long visitors are viewing pages on the Services. Performance/Analytical Cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising. For example, Google LLC (“Google”) uses cookies in connection with its Google Analytics services. Google’s ability to use and disclose information collected by Google Analytics about your visits to the Services is subject to the Google Analytics Terms of Use and the Google Privacy Policy. You have the option to opt-out of Google’s use of Cookies by visiting the Google advertising opt-out page at www.google.com/privacy_ads.html or the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout/.
You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work. To find out more information about Cookies generally, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/.
Do the Services Involve AI-Powered Communications or Recorded Calls and Texts?
Catapult and its service providers may communicate with you and your personnel by text message, telephone, email, and in-application messaging for operational, support, administrative, training, and marketing purposes. By using our Services, you consent — and agree to ensure your relevant personnel consent — to receiving such communications.
Some communications may be sent or handled by automated systems and conversational agents powered by artificial intelligence (“AI Agents”) rather than human representatives. At the start of any AI-powered call or new text conversation initiated by an AI Agent, we will disclose that you may be communicating with an AI. We encourage you to inform your relevant personnel accordingly.
Catapult may record, retain, and analyze telephone calls and text message communications for operational, support, quality assurance, training, analytics, and compliance purposes, including via AI tools. By using our Services, you acknowledge and agree to Catapult’s collection, recording, retention, and use of communications as described in this section.
How Long is My Personal Information Retained?
We will retain your Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained. For example, we retain your payment data for as long as we need to process your purchase or subscription. Generally, we maintain backups and historical records of Personal Information in the ordinary course of our business, and all data, except data stored solely by third party providers, are subject to this retention policy. Notwithstanding the above, there are certain criteria that may impact the retention period, including: (i) the length of time we have an ongoing relationship with you and provide the Services to you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
Is Information About Me Secure?
The security of your Personal Information is important to us. However, while we follow generally accepted industry standards designed to help protect your Personal Information, please be aware that no method of transmission over the Internet, or method of electronic storage, is ever completely secure. Therefore, while we strive to protect your Personal Information, we cannot guarantee its absolute security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time. If you have reason to believe that your interaction with us is no longer secure or that your Personal Information has been accessed, used or disclosed improperly or without your authorization, please immediately notify us at support@ordercatapult.com.
Does Catapult Collect Personal Information of Children?
We do not knowingly collect or solicit Personal Information from anyone under 13 years of age; if you are a minor under the age of 13, please do not attempt to register for or otherwise use the Services or send us any Personal Information. If we learn we have collected Personal Information from a minor under 13 years of age, we will delete that information as quickly as possible. If you believe that a minor under 13 years of age may have provided Personal Information to us, please contact us at support@ordercatapult.com.
What U.S. State Privacy Rights Apply to the Services?
Depending on where you live, you may have some or all of the rights described in this section. If you reside in certain U.S. states such as California, Colorado, Connecticut, Delaware, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia you may have certain rights afforded to you (as described below) depending on your state of residence. If we are processing your Personal Information as a service provider, you should contact the entity that collected your Personal Information in the first instance to address your rights with respect to such data. Please note that your rights may be subject to certain conditions or exceptions in accordance with applicable U.S. State Privacy Laws.
· Access: You may have the right to request confirmation of or access to the Personal Information that we process about you. You can also request access to a portable copy of your Personal Information. If you are a Minnesota or Oregon resident, you also have the right to request a list of specific third parties, other than natural persons, to whom we have disclosed your Personal Information (subject to exceptions in accordance with applicable law).
· Deletion: You may have the right to request that we delete the Personal Information that we have collected about you.
· Correction: You may have the right to request that we correct any inaccurate Personal Information we have collected about you.
· Portability: You may have the right to request a copy of your Personal Information in a machine-readable format, to the extent technically feasible.
To exercise the above rights, you or your Authorized Agent (if applicable and as defined below), must send us a request at support@ordercatapult.com that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Information (such as your Contact Data), and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Information provided in a Valid Request to verify your identity and complete your request.
If you are a California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey Oregon, Rhode Island, or Texas resident, you may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf.
We will work to respond to your Valid Request within the time period required by applicable privacy laws. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
If you are a Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, or Virginia resident and we refuse to take action on your request within a reasonable period of time after receiving your request in accordance with this section, you may appeal our decision. In such appeal, you must (1) provide sufficient information to allow us to verify that you are the person about whom the original request pertains and to identify the original request, and (2) provide a description of the basis of your appeal. Please note that your appeal will be subject to your rights and obligations afforded to you under the U.S. State Privacy Laws (as applicable). We will respond to your appeal within the time period required under the applicable law. You can submit a Verified Request to appeal by the following methods:
· Email us at: support@ordercatapult.com (title must include “[STATE OF RESIDENCE] Appeal”)
· Submit a form at this address: [INSERT FORM URL]
If we deny your appeal, you have the right to contact the Attorney General of your State, including by the following links: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, and Virginia.
We will not discriminate against you for exercising your rights under applicable privacy laws. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under applicable privacy laws. However, we may offer different tiers of our Services as allowed by applicable data privacy laws with varying prices, rates or levels of quality of the goods or services you receive related to the value of Personal Information that we receive from you.
If you have any questions about this section or whether any of the foregoing rights apply to you, please contact us at support@ordercatapult.com.
What Other State-Specific Privacy Rights Apply to the Services?
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Information to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at support@ordercatapult.com.
If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties, but please note that we do not currently sell your Personal Information as sales are defined in Nevada Revised Statutes Chapter 603A.
Depending on your state of residence, you may have the right to opt out from the “sale,” “share,” or disclosure of your Personal Information for the purposes of targeted advertising, but please note that we do not sell, share, or process your Personal Information for the purposes of targeted advertising, and have not done so over the last 12 months.
Depending on the state of your residence, you may have the right to opt-out the use of automated decision making technology or from the processing of your Personal Information for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects to you, if applicable. However, we do not process your Personal Information in this manner.