We take your privacy seriously. This policy explains what we collect, why we collect it, and the choices you have.
We at Dumpling know you care about how your personal information is used and shared, and we take your privacy seriously. Please read the following to learn more about our Privacy Policy. By using or accessing the Services in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent that we will collect, use, and share your information in the following ways.
The Services are operated by Dumpling I, Inc. We operate under two brands, Dumpling and Aisle8, and this Privacy Policy applies to both. References to “Dumpling,” “we,” “us” or “our” in this Policy mean Dumpling I, Inc., and include the Aisle8-branded Services.
Remember that your use of Dumpling's Services is at all times subject to the Terms of Use available at dumpling.us/terms, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.
In this Policy:
Where a section applies only to one of these, we say so. Everywhere else, “Services” means all three.
This Privacy Policy covers our treatment of personally identifiable information (“Personal Information”) that we gather when you are accessing or using our Services, but not to the practices of companies we don't own or control, or people that we don't manage. We gather various types of Personal Information from our users, as explained in more detail below, and we use this Personal Information internally in connection with our Services, including to personalize, provide, and improve our services, to allow you to set up a user account and profile, to contact you and allow other users to contact you, to fulfill your requests for certain products and services, and to analyze how you use the Services. In certain cases, we may also share some Personal Information with third parties, but only as described below.
As noted in the Terms of Use, we do not knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, please do not attempt to register for the Services or send any personal information about yourself to us. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under 13 may have provided us personal information, please contact us at mygig@dumpling.us.
We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time as well, but we will alert you to changes by placing a notice on the Dumpling website, by sending you an email, and/or by some other means. Please note that if you've opted not to receive legal notice emails from us (or you haven't provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is collected.
We receive and store any information you knowingly provide to us. For example, through the registration process and/or through your account settings, we may collect Personal Information such as your name, email address, phone number, delivery addresses, and the contents of your shopping lists and orders.
Certain information may be required to register with us or to take advantage of some of our features. Business Owners are required to provide their bank account details to Dumpling and the Payment Processor, and we ask for the last four digits of their Social Security Number to facilitate the processing of payments. Clients provide a payment card, which is stored by our Payment Processor.
We may communicate with you if you've provided us the means to do so, including through your mobile device. If you've given us your email address, we may email you about your use of the Services, send you order updates, or tell you about features and offers from Dumpling and Aisle8. Also, we may receive a confirmation when you open an email from us. This confirmation helps us make our communications with you more interesting and improve our services. If you do not want to receive communications from us, please indicate your preference by contacting us at mygig@dumpling.us.
If you allow notifications, your device gives us a push token — an identifier that lets our notification provider deliver messages to that specific device. We use it to send order updates and account notices, never advertising from other companies. You can turn notifications off at any time in your device settings, and we remove the token when you sign out.
The Apps ask for camera and photo library access only when you choose to use a feature that needs it: taking or choosing a profile photo, and attaching photos of items or receipts. Photos you add are stored in our file storage (Google Firebase). If you attach a photo in the Ai8 assistant, that photo is also sent to the AI service described below. Declining access simply disables those features — everything else in the App keeps working.
Whenever you interact with our Services, we automatically receive and record information on our server logs from your browser or device, which may include your IP address, the approximate location suggested by that IP address, device identification, “cookie” information, the type of browser and/or device you're using to access our Services, and the page or feature you requested. We do not collect precise location from your device's GPS, and the Apps never ask for location permission. Delivery addresses are the ones you type in, not ones we detect.
“Cookies” are identifiers we transfer to your browser or device that allow us to recognize your browser or device and tell us how and when pages and features in our Services are visited and by how many people. You may be able to change the preferences on your browser or device to prevent or limit your device's acceptance of cookies, but this may prevent you from taking advantage of some of our features.
We may use this data to customize content for you that we think you might like, based on your usage patterns. We may also use it to improve the Services — for example, this data can tell us how often users use a particular feature of the Services, and we can use that knowledge to make the Services interesting to as many users as possible.
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications that you do not wish them to track certain of your online activities over time and across different websites. Our Websites do not respond to Do Not Track signals. Our Apps do not track your activity across other companies' apps or websites, so there is nothing for a Do Not Track signal to disable there.
AI assistant. Our shopping-list assistants (“Ai8” for Clients, and the assistant in the Business Owner dashboard) help you build and organize your shopping list. Messages and photos you send to the assistant are processed by AI services from Google and Anthropic to help build your list — primarily Google's Gemini models, and in some cases Anthropic's Claude models, both running on Google Cloud's Vertex AI. They are used to generate a response to you, and for nothing else. We ask for your permission inside the app before anything is sent to these services, and you can decline by not using the assistant.
As part of the shopping and delivery process between Clients and Business Owners, Dumpling will facilitate the sharing of information between the two users involved in the transaction, such as the Client's delivery address, shopping list, and payment status. When a Client connects to a Business Owner, we will exchange information to facilitate communication, including name, phone, profile pictures and email addresses of both parties. By using Dumpling, you are directing us to share your information in this way. Since this is an important part of the Services we provide, we need to do this in order to perform our obligations under our Terms of Use. We expect Business Owners to respect the privacy of the member whose information you have received. As described in our Terms, Dumpling has not granted a license to Business Owners to use the information for unauthorized transactions or sending unsolicited commercial messages in violation of any applicable laws, including any consent requirements of the jurisdiction of the recipient. You should only add a member to your email or physical mailing list or otherwise use or store a Client's personal information in accordance with applicable laws, including any consent requirements that apply in that Client's jurisdiction.
The Apps do not include a built-in chat. When you tap to message or call the other party, the App opens your device's own messaging or phone app with the number filled in. Those texts and calls travel over your mobile carrier's network — we do not receive, store, or monitor their contents, and standard message and data rates may apply. We do separately send you our own notifications by text message, email and push notification, as described in this Policy.
Some earlier Dumpling applications included an in-app chat feature provided by Stream. Where that feature was used, we received and stored the date, time and contents of those messages, and may have monitored them for security purposes. The current Aisle8 Apps do not include in-app chat between Clients and Business Owners.
We do not rent or sell your Personal Information in personally identifiable form to anyone; provided that, we may share your Personal Information with third parties as described in this section:
We employ other companies and people to perform tasks on our behalf and need to share your information with them to provide the Services. Unless we tell you differently, these providers do not have any right to use the Personal Information we share with them beyond what is necessary to assist us. The providers we rely on are:
We may de-identify your Personal Information so that you are not identified as an individual, and provide that information to our partners. We may also provide aggregate usage information to our partners (or allow partners to collect that information from you), who may use such information to understand how often and in what ways people use our Services, so that they, too, can provide you with an optimal online experience. However, we never disclose aggregate usage or de-identified information to a partner (or allow a partner to collect such information) in a manner that would identify you as an individual person.
This section applies only to our marketing Websites at dumpling.us and aisle8.co. It does not apply to the Apps, which contain no advertising, ad networks, or third-party analytics.
Google Analytics may use cookies on our Websites to collect information such as how often visitors come to the Website, what pages they visit, and what other sites they used prior to coming to the Website. We may use that information to improve our Website. Google Analytics collects the IP address assigned to you on the date you visit the Website, but not your name or other personally identifying information, and we do not combine the information generated through the use of Google Analytics with any personally identifying information. Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You may find additional information about Google Analytics at google.com/policies/privacy/partners/, and you can opt out of Google Analytics using the add-on at tools.google.com/dlpage/gaoptout/.
We may also measure the effectiveness of advertising we place on third-party platforms by using those platforms' own measurement tools on our Websites — for example, a conversion-tracking pixel that tells us an ad led someone to visit us. Where we do this, the platform may set cookies on your browser and may connect that visit to your account with that platform, in accordance with its own privacy policy. This happens on our Websites only, and only where permitted by the settings you have chosen with those platforms. We do not provide those platforms with your name, email address, phone number, orders, or shopping lists.
In certain situations, businesses or third party websites we're affiliated with may sell or provide products or services to you through or in connection with the Services (either alone or jointly with us). You can recognize when an affiliated business is associated with such a transaction or service, and we will share your Personal Information with that affiliated business only to the extent that it is related to such transaction or service. We have no control over the policies and practices of third party websites or businesses as to privacy or anything else, so if you choose to take part in any transaction or service relating to an affiliated website or business, please review all such business' or websites' policies.
Certain user profile information, including your name, location, and any video or image content that such user has uploaded to the Services, may be displayed to other users to facilitate user interaction within the Services or address your request for our services. Your account privacy settings may allow you to limit the other users who can see the Personal Information in your user profile and/or what information in your user profile is visible to others. Please remember that any content you upload to your public user profile, along with any Personal Information or content that you voluntarily disclose online in a manner other users can view, becomes publicly available, and can be collected and used by anyone.
We may choose to buy or sell assets, and may share and/or transfer customer information in connection with the evaluation of and entry into such transactions. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party.
We reserve the right to access, read, preserve, and disclose any information that we reasonably believe is necessary to comply with law or court order; enforce or apply our Terms of Service and other agreements; or protect the rights, property, or safety of Dumpling, our employees, our users, or others.
Before a Business Owner can accept payments, we're required to verify their identity. Stripe runs this check: you photograph a government-issued ID — driver's license, passport, or identity card — and take a selfie, directly in Stripe's secure flow. The photographs of your ID and your face go to Stripe, not to us, and Stripe stores them under its own privacy policy. We receive only the result: the type of document used, the name, date of birth and address it showed, whether the selfie matched, and whether that information matches the profile you gave us. We keep that result so we can show your verification status and detect duplicate accounts. Clients do not go through identity verification.
Your account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and Personal Information by selecting and protecting your password and/or other sign-on mechanism appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.
We endeavor to protect the privacy of your account and other Personal Information we hold in our records, but unfortunately, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.
Through your account settings, you may access, and, in some cases, edit or delete the following information you've provided to us:
The information you can view, update, and delete may change as the Services change. If you have any questions about viewing or updating information we have on file about you, please contact us at mygig@dumpling.us.
In the Aisle8 Apps you can close your account yourself: go to Account, then Profile, then Delete account at the bottom of the page. Step-by-step instructions are at aisle8.co/account-deletion. For Legacy Services, or if you can't sign in, email us at mygig@dumpling.us and we'll handle it for you.
We keep your information for as long as your account is open. When you close your account, we delete your personal information. The only things we keep are records we're legally required to retain — order, payment and tax records, and anything we need to resolve a dispute, prevent fraud, or meet a legal obligation. We don't use anything we retain for any other purpose.
Your past orders stay in those records — what was bought, what it cost, and how it was paid for.
You can always opt not to disclose information to us, but keep in mind some information may be needed to register with us or to take advantage of some of our features.
You may be able to add, update, or delete information as explained above. When you update information, however, we may maintain a copy of the unrevised information in our records. You can close your account as described under Closing your account.
If you live in California, you can ask us to do any of the following, free of charge:
To exercise any of these rights, email us at mygig@dumpling.us. We will not deny you services, charge you a different price, or give you a lower quality of service because you exercised any of them. We may need to verify your identity before we act on a request, which usually means confirming you control the email address or phone number on the account.
Separately, under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Information to third parties for such third parties' direct marketing purposes; in order to submit such a request, please contact us at mygig@dumpling.us. Additionally, California residents are entitled to ask us for a notice identifying the categories of Personal Information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to mygig@dumpling.us.
If you have any questions or concerns regarding our privacy policies, please send us a detailed message to mygig@dumpling.us, and we will try to resolve your concerns.
Dumpling I, Inc. · mygig@dumpling.us