Privacy Policy

1. Introduction

Abraham Oviedo Services, LLC ("we," "us," or "our"), doing business as Big Asere, operates the food delivery platform accessible at our website and any associated digital properties. We are committed to protecting your personal information and your privacy.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have under the Nebraska Data Privacy Act (NDPA) — effective January 1, 2025 — and applicable federal laws including the Federal Trade Commission Act (FTC Act) and the Electronic Communications Privacy Act (ECPA).

Data Controller: Abraham Oviedo Services, LLC DBA Big Asere
Contact: support@bigasere.com

By using Big Asere, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please refrain from using our services.

2. Information We Collect

We collect only the information necessary to fulfill your order and improve our service.

3. How We Use Your Information

We use your personal information for the following lawful purposes:

• Order fulfillment: Processing your order, coordinating with the restaurant, and dispatching a driver to your delivery address.
• SMS/email updates: Sending transactional SMS messages via Twilio about your order status (confirmed, being prepared, out for delivery, delivered).
• Customer support: Responding to your questions, resolving issues, and processing refund requests.
• Service improvement: Analyzing aggregate, anonymized order data to improve our platform and restaurant partnerships.
• Fraud prevention and security: Detecting and preventing fraudulent orders, abuse, and unauthorized access.
• Legal compliance: Meeting obligations under applicable local, state, and federal laws.

4. Third-Party Service Providers

We share your data only with service providers necessary to operate our platform. All providers are obligated to protect your information and may not use it for their own purposes.

We do not share your personal information with advertisers, data brokers, analytics platforms, or marketing companies.

5. Your Rights Under the NDPA

As a Nebraska resident, the Nebraska Data Privacy Act (Neb. Rev. Stat. § 87-97 et seq.), effective January 1, 2025, grants you the following rights regarding your personal data:

6. Data Retention

We retain your order history and associated personal data for 2 years from the date of your most recent order. This retention period supports tax and business record-keeping requirements and dispute resolution.

You may request deletion of your personal data at any time by contacting support@bigasere.com. Deletion requests will be processed within 30 days, subject to any legal holds that require us to retain certain records.

When data is deleted, it is permanently purged from our active systems and queued for deletion from backup systems within 90 days.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal information:

• Supabase Row Level Security (RLS): Database-level access controls ensure only authorized operations can read or write your data.
• Stripe PCI-DSS Level 1: All payment data is handled by Stripe — we never see or store your full card details.
• Cloudflare TLS 1.3: All data transmitted between your browser and our servers is encrypted in transit.
• Encryption at rest: Data stored in Supabase is encrypted at rest using AES-256.
• Access controls: Access to personal data is restricted to personnel who require it to operate the service.

8. Children's Privacy

Big Asere is not directed to children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13. Our practices comply with the Children's Online Privacy Protection Act (COPPA).

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly. If you believe we have collected data from a child under 13, please contact us at support@bigasere.com.

9. SMS Communications

By providing your phone number when placing an order, you expressly consent to receive transactional SMS messages from Big Asere regarding your order status.

Message frequency is typically 2–4 messages per order. Message and data rates may apply. To opt out, reply STOP to any message. Reply HELP for assistance.

For full details on our SMS program, including carrier information and opt-out procedures, see our SMS Notifications Policy.

10. International Data

All personal data collected by Big Asere is stored exclusively on servers located in the United States of America (AWS us-east-1 via Supabase). We do not transfer personal data to servers outside the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

For material changes that significantly affect your rights or how we handle your data, we will provide notice via email at least 30 days prior to the change taking effect. Your continued use of Big Asere after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact & Privacy Requests

For privacy requests, data access, correction, deletion requests, or any questions about this Privacy Policy: