Privacy Policy

Effective date: September 2, 2026

This Privacy Policy describes how Use Pure Water ("Use Pure Water," "we," "us," or "our") collects, uses, discloses, and retains personal information through usepurewater.com, our checkout and customer-service tools, and our water-delivery operations. Use Pure Water is the local delivery service for Pure Water of Mountain View.

1. Notice at Collection

When you visit our website, request service, create or manage a delivery account, make a payment, contact us, or receive a delivery, we collect the categories of personal information described below. We use that information to provide and support water delivery, process payments, communicate with you, secure our services, keep required business records, and—unless you opt out of optional measurement—understand website use, improve public pages and checkout, and measure advertising results.

We retain each category only for as long as reasonably necessary for the purposes described in Section 7. We do not sell personal information for money. When optional measurement is enabled, limited disclosures to Meta may be considered "sharing" for cross-context behavioral advertising under California law. You can decline or withdraw optional measurement at any time through Privacy choices, and we honor applicable Global Privacy Control signals.

2. Personal Information We Collect and Its Sources

We collect the following categories of information:

• Identifiers and contact information: name, email address, telephone number, customer or business name, and identifiers connected with an account, checkout, receipt, or service request.
• Delivery and account information: street address, ZIP code, service area, delivery and pickup instructions, preferred delivery day, route information, account status, and customer-support history.
• Order and commercial information: water type, bottle material and size, product codes, quantities, delivery frequency, prices, promotions, purchases, receipts, subscription status, and service changes.
• Payment and authorization information: payment status, transaction amount, provider payment references, tokenized saved-card references, billing authorizations, and charge history. Card numbers, security codes, and card-entry data are collected directly by Clover in Clover-hosted fields and are not received by our application.
• Communications and consent records: messages and requests you send us, service-contact choices, agreement acknowledgments, SMS opt-in and opt-out records, delivery-message status, privacy choices, timestamps, and the source of a request.
• Device, security, and usage information: IP address, browser and device characteristics, approximate location derived from an IP address, request timestamps, public page templates visited, and security or diagnostic records produced by our website and hosting providers.
• Optional analytics and advertising information: permitted website and checkout events, Google Analytics client and session identifiers, Meta browser and click identifiers (_fbp and _fbc), safe UTM campaign fields, the paid landing-page path, an opaque purchase event identifier, self-hosted Umami page and event records, masked session replay, and click and scroll heatmaps on approved public pages. Measurement starts automatically unless you have declined or a Global Privacy Control signal is active.

We receive information directly from you, automatically from your browser or device, from our staff as they provide delivery and support, and from service providers involved in payment, communications, address validation, delivery operations, analytics, and advertising measurement.

3. How We Use Personal Information

We use personal information to:

• respond to requests, determine service-area eligibility, and set up delivery;
• manage orders, customer-owned bottles, subscriptions, routes, pickup, refill, return, and customer support;
• process payments, maintain saved-card authorizations, issue receipts, and handle payment recovery;
• send delivery, account, billing, and support communications, including text messages when you opt in;
• maintain consent, agreement, transaction, tax, accounting, dispute, and operational records;
• authenticate staff and customer access, prevent fraud, protect the website, and diagnose service problems;
• improve public pages and checkout using permitted analytics, masked session replay, and click and scroll heatmaps, and measure advertising results when optional measurement is allowed;
• comply with law and establish, exercise, or defend legal claims.

4. How We Disclose Personal Information

We disclose personal information to the following categories of recipients for the purposes described above:

• Website, database, and connectivity providers, including Vercel and Neon, which host the application and its operational data, and Tailscale, which provides encrypted connectivity to our self-hosted analytics infrastructure.
• Payment providers, including Clover, which collects card-entry data, tokenizes payment methods, and processes charges.
• Communications providers, including Resend and Twilio, when used to send email, text messages, delivery notices, or authentication codes.
• Address and routing providers, including Google Maps Platform, when address autocomplete, geocoding, maps, or route computation is used.
• Operational providers, including lead-intake and delivery-support providers when needed to respond to a request or provide service.
• Analytics and advertising providers: Google Analytics and Meta receive the limited information described in Section 5 only when optional measurement is allowed. Umami analytics data is stored on infrastructure controlled by Use Pure Water rather than sent to Umami's hosted service.
• Professional and legal recipients, such as accountants, insurers, attorneys, regulators, law enforcement, or a court when reasonably necessary or legally required.
• A successor to the business, in connection with a proposed or completed financing, reorganization, merger, sale, or transfer, subject to appropriate confidentiality and legal requirements.

We do not sell or rent personal information. We do not disclose mobile phone numbers, SMS opt-in data, or text message consent to third parties, affiliates, or lead generators for their own marketing or promotional purposes. Communications providers receive mobile messaging information only as needed to deliver messages, maintain security, document consent, comply with law, or process your requests.

5. Cookies, Analytics, and Advertising Measurement

Necessary website functions and hosting security may operate when you visit the site. Optional Google Analytics 4, Google Ads attribution, Meta measurement, and self-hosted Umami analytics—including masked session replay and click and scroll heatmaps—start automatically on approved public pages unless you have declined or a Global Privacy Control signal is active. Select Keep enabled to dismiss the notice or Decline to stop optional measurement. The same version 3 choice covers these measurement purposes. Previous denials remain denied, including version 1 and version 2 denials. Older grants are renewed automatically under this opt-out policy.

The version 3 consent cookie records "granted" or "denied" for one year. A default "granted" value records that measurement is enabled under this opt-out policy; it does not mean you clicked an acceptance button. When measurement is allowed, Google Analytics may set first-party cookies whose names begin with _ga, Google Ads attribution may set first-party conversion-linker cookies whose names begin with _gcl_, and Meta may set or use _fbp and _fbc. A consented _fbc click cookie created by this site expires after 90 days, and _gcl_ cookies expire within 90 days. Withdrawing consent removes the readable _ga, _gcl_, _fbp, and _fbc cookies this site can access. Consented campaign attribution stored in browser session storage ends with the browser session. We also issue an opaque, HttpOnly consent receipt cookie and retain only its one-way SHA-256 token hash, status, version, and grant or revocation timestamps so our server can verify and honor the same choice.

Google Analytics is limited to an approved set of public routes and permitted events. Tokenized checkout paths are reported only as /checkout/link. Arbitrary query values, URL fragments, street addresses, raw contact information, and checkout tokens are excluded from analytics page paths. When measurement is enabled, Google analytics storage, advertising storage, and advertising user-data consent are enabled so eligible GA4 key events can be attributed and exported to our linked Google Ads account. Ad personalization remains disabled. Google Signals and Google user-provided data collection also remain disabled.

Self-hosted Umami records sanitized page paths and a closed set of event names, safe enum values, and numeric totals. It does not use Umami's identify feature or accept arbitrary event properties. On approved public landing, comparison, and subscription pages, Umami may record masked session replay and click and scroll heatmaps for up to five minutes per page load. Same-page navigation and changes to the privacy choice do not restart that limit. Replay masks every input and blocks marked contact, address, delivery-instruction, payment, error-detail, and receipt areas. Query strings and URL fragments are removed, external referrers are reduced to their origin, and tokenized checkout URLs are represented only as /checkout/link. Replay and heatmaps are disabled on customer links, checkout return and receipt pages, customer and staff portals, Dispatch, driver, API, staging, preview, and localhost routes. Replay and heatmap data is retained for 30 days.

Meta browser measurement is limited to ViewContent on the alkaline-glass advertising page, InitiateCheckout, AddPaymentInfo, and Purchase. For a completed paid subscription carrying version 2 or version 3 consent, the Meta Conversions API may receive the final first-charge value and currency, final product codes and quantities, consented Meta browser or click identifiers, and normalized SHA-256 hashes of the checkout email address and telephone number. It does not receive a name, street address, checkout token, card data, raw contact value, receipt number, or internal database ID. Browser and server Purchase events use the same opaque event identifier to prevent duplicate counting. Meta reporting failures never delay, reverse, or determine payment success.

Select Privacy choices in the public website footer to allow, decline, or withdraw optional measurement. Withdrawal stops future Google, Meta, and Umami measurement from this site, immediately clears active replay buffers, and removes readable _ga*, _fbp, _fbc, and related first-party attribution state from that browser. It does not delete information already received by a provider or transaction records we must retain; you may submit a deletion request under Section 8.

An enabled Global Privacy Control signal forces denial and prevents Google Analytics, Meta, and Umami measurement from loading. We do not separately respond to the older browser "Do Not Track" signal because it does not communicate a standardized request, but we do respond to Global Privacy Control as described above. Google, Meta, and Clover also process information under their own privacy notices: Google Privacy Policy, Meta Privacy Policy, and Clover Privacy Policy.

6. Text Messaging

If you opt in to delivery text messages, we use your mobile number and consent records to send delivery reminders, driver-assignment notices, out-for-delivery updates, delivery confirmations, account or schedule updates, change-request follow-up, and support responses. Message frequency varies with delivery and account activity; recurring delivery customers may receive up to six messages per delivery cycle plus responses to customer-initiated requests. Message and data rates may apply.

Consent to delivery text messages is not required to make a purchase. Reply STOP to opt out or HELP for help. We may send one confirmation after an opt-out and retain the opt-out record so we can honor it.

7. Retention

We use the following retention periods or criteria:

• The version 3 privacy-choice cookie and opaque server-verifiable consent receipt remain for one year unless replaced or revoked sooner; only the receipt token's one-way hash and consent status are stored on our server.
• A consented _fbc click cookie created by this site remains for 90 days, and consented Google Ads _gcl_ conversion-linker cookies remain for up to 90 days; session attribution ends with the browser session.
• Service-request records remain while we respond and as needed to document the request, follow-up, and consent.
• Customer, delivery, subscription, transaction, receipt, and billing-authorization records remain during the customer relationship and afterward as needed for service history, accounting, tax, fraud prevention, chargebacks, disputes, legal obligations, and legal claims.
• SMS consent and opt-out records remain as needed to demonstrate and honor messaging choices.
• Consented campaign fields, validated Google and Meta identifiers, consent version, and opaque purchase event identifiers remain with the associated checkout record for attribution, deduplication, troubleshooting, and audit purposes.
• The Meta conversion queue makes no more than eight delivery attempts. Its delivery status and approved conversion payload remain with the transaction record as needed for troubleshooting and measurement auditing.
• Self-hosted Umami session replay and click and scroll heatmap records are deleted after 30 days.
• Privacy-request records remain for at least 24 months.
• Security, diagnostic, and provider records remain according to operational, security, and legal needs and the applicable provider's retention settings.

When information is no longer reasonably necessary, we delete it, de-identify it, or restrict its use, subject to technical feasibility, backup cycles, and legal retention requirements.

8. Your Privacy Choices and Requests

You may ask us to:

• confirm whether we maintain personal information about you and provide access to it;
• correct inaccurate personal information;
• delete personal information, subject to applicable exceptions;
• explain the categories of information, sources, purposes, and recipients associated with your information; or
• stop optional analytics and advertising measurement, including Umami replay and heatmaps.

Submit an access, correction, or deletion request by emailing support@usepurewater.com or calling +1 (650) 938-3122. Describe the request and provide the email address or telephone number associated with your service so we can locate the relevant records. Do not send payment-card information, passwords, or authentication codes.

We confirm receipt within 10 business days and respond within 45 calendar days. If reasonably necessary, we may extend the response period by another 45 days and will explain the extension during the first response period. We verify access, correction, and deletion requests using information already associated with the relevant records. We use verification information only to process and document the request. If we cannot verify a request or an exception applies, we explain the decision. We do not require identity verification to decline optional measurement or to submit an opt-out of sale or sharing.

An authorized agent may submit a request using the same contact methods. We may require evidence that the agent is authorized and may confirm the request directly with the customer. We do not discriminate against anyone for exercising a privacy right. A privacy choice does not change water prices, service eligibility, or the new-customer filled-bottle promotion.

9. California Privacy Disclosures

California residents may have rights to know, access, delete, and correct personal information; to opt out of its sale or sharing; to limit certain uses of sensitive personal information; and to receive equal service and price after exercising a privacy right. We make the request methods in Section 8 and the measurement opt-out described in Section 5 available to California residents.

We do not sell personal information. California law may treat consented disclosures to Meta for advertising measurement as sharing for cross-context behavioral advertising. Select Privacy choices and then Decline, or enable Global Privacy Control, to opt out. We process that browser-level choice immediately, do not require account creation or identity verification, and do not ask you to opt back in while the denial remains saved. The privacy panel confirms when Global Privacy Control has turned optional Google and Meta and Umami measurement off.

We use delivery addresses, payment-related information, account credentials, and other potentially sensitive information only to provide requested service, process payments, maintain security, comply with law, or for other legally permitted purposes. We do not use sensitive personal information to infer characteristics about you, so we do not provide a separate sensitive-information limitation link.

The first-filled-bottle promotion is a new-customer product offer. It is not conditioned on allowing analytics or advertising measurement, opting in to text messages, or waiving a privacy right.

California Civil Code Section 1798.83 also permits eligible customers to request information about disclosures of specified personal information to third parties for their own direct-marketing purposes. Submit that request using the email address or telephone number in Section 8 and identify it as a "California Shine the Light request."

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include provider-hosted card fields, tokenized payment references, access controls, authenticated internal tools, data validation, restricted measurement routes, limits on measurement payloads, encrypted analytics backups, and private access controls for the self-hosted Umami dashboard. No internet transmission or storage system is completely secure.

11. Children

Our website and delivery service are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share the personal information of consumers under 16.

12. Changes to This Policy

We will post an updated policy on this page and change the effective date when our practices change. For a material change, we will provide additional notice through the website, the affected service, or direct communication, and request an additional choice when appropriate or legally required.

13. Contact Us

For privacy questions or requests, email support@usepurewater.com or call +1 (650) 938-3122.