Skip to content
Dao Distribution

Privacy Notice

Last updated September 9, 2026

Dao Distribution, LLC is a wholesale foodservice distributor in South San Francisco, California. This explains what we collect through this website and what we do with it. It is written to be read, not to be impressive.

The short version

  • Google Analytics and Vercel Web Analytics run only if you accept analytics. We do not use advertising tags or session recordings.
  • We do not sell your information, and we do not share it for advertising.
  • Essential cookies support sign-in and account selection. Optional Google Analytics cookies measure site use.
  • Your order history is yours. The portal is built so it can only ever show you your own records.

What we collect

  • Account details, when you create one: your name, email address, and phone number if you give it. Sign-in itself is handled by Clerk, our authentication provider; we do not see or store your password.
  • Enquiries, when you use the contact form: your name, business, email, phone, address and message.
  • Order requests you send through the portal: the items and case quantities, plus the contact details attached to the request.
  • Your account history with us: invoices, orders and the items you have bought, mirrored from our accounting system so the portal can show them back to you.
  • If you accept analytics: page visits, browser and device information, approximate location, and actions such as adding an item or successfully sending an enquiry or order request. Google receives technical information, including your IP address, to process these requests; GA4 does not log or store individual IP addresses.
  • Ordinary server logs kept by our hosting provider, which include IP addresses.

What is stored in your browser

A few small things, and none of them is used to track you across other websites.

  • Cookies set by Clerk to keep you signed in and to protect against fraudulent sign-in attempts. These are strictly necessary — without them the portal cannot know who you are.
  • Local storage on your own device holding your in-progress order and, if you have entered them, the contact details attached to it. This is what lets a half-built order survive a page reload. It stays on your device until you clear it, and we cannot read it from our end unless you send the order.
  • Local storage holding your language choice (English, Thai or Chinese) and your analytics choice with its date. We remember that choice for up to 180 days; clearing browser storage resets it.
  • If you accept analytics, Google’s _ga and _ga_* cookies distinguish visits. We configure these cookies to expire after 180 days without extending their lifetime on each visit. Vercel Web Analytics does not use analytics cookies.
  • A cookie that remembers which restaurant you are ordering for, if your login is connected to more than one.

Optional analytics stays off until you choose Accept analytics. Rejecting it does not prevent browsing, signing in or ordering. You can withdraw your choice using here or in the footer. Withdrawal stops future analytics collection, removes accessible Google Analytics cookies and reloads the page to unload analytics scripts. It does not erase reports already collected. Your choice applies to this browser; Global Privacy Control and Do Not Track signals keep analytics off.

Who else is involved

We use a small number of service providers to run the site. They handle data to provide those services under their applicable terms and privacy policies.

  • Clerk — accounts and sign-in.
  • Vercel — hosting, server logs and, with your permission, aggregate Web Analytics. Its visitor hash is discarded after 24 hours.
  • Google Analytics — optional usage and conversion reports. We do not send names, emails, phone numbers, customer identifiers, form text, order contents or invoice details as analytics event data. We remove query strings and replace product and blog paths with general page types. Account, invoice and admin screens are excluded. Advertising personalization and Google signals are disabled in our site configuration.
  • Neon — the database holding the mirror of your order history.
  • Resend — sending email, including your enquiry and order requests to us.
  • Sentry — error reporting. If something breaks while you use the site, a technical report of the error is sent to Sentry so we can fix it. It is configured not to record your screen and not to send request contents, cookies or personal details.
  • Mapbox — the delivery-area map. Your browser contacts Mapbox to load it, so Mapbox sees your IP address when that map loads.
  • Cloudflare R2 — serving product images.
  • Zoho Books — our accounting system, and the source of your invoice and order records.

Learn more about Google’s use of data from partner sites and Vercel Web Analytics privacy.

How your order history is protected

The portal database enforces separation at the database itself, not only in the application: the account is restricted so that a query can only return rows belonging to the customer you are signed in as, and the credential the website uses cannot list or search other customers at all. Prices from your past invoices are deliberately never sent to your browser.

How long we keep things

Business records such as invoices and orders are kept as long as we need them for accounting and tax purposes. Enquiries are kept as long as they are useful for serving you. You can ask us to close your account at any time.

To delete your account, email or call us using the details below and we will remove your login within a few business days. Invoices and order records that we are required to keep for accounting and tax purposes stay in our accounting system after the login is gone.

Google Analytics event data is retained for two months. User-level data is retained for 14 months, and new activity resets that user-level retention period. These limits do not apply to aggregated standard reports. The 180-day lifetime of analytics cookies is separate from Google’s report retention settings.

Your choices

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, subject to records we are required to keep. California residents have specific rights under the California Consumer Privacy Act, including the right to know and the right to delete. We do not sell or share personal information as those terms are used in that Act.

To make a request, contact us using the details below. We will not treat you differently for asking.

Children

This is a business-to-business service and is not directed at children. We do not knowingly collect information from anyone under 18.

AI tools

We use AI tools in running the business, including preparing product information and drafting communications. AI output can be wrong, and our Terms of Service explains what that means for the information you see here. We do not use AI to make final decisions about pricing, credit, or whether to serve a customer. Authorised staff may also use AI tools connected to analytics reports to understand aggregate site usage and improve the website.

Changes

If this notice changes, the date at the top changes with it.

Contact

Dao Distribution, LLC, South San Francisco, California.
(415) 999-4863 · andy@daodistribution.com