Confidential Information
Staff may access customer addresses, phone numbers, order records, cleaner verification documents, rider records, payout information, complaints, security logs, product plans, and business data. This information is confidential and may be used only for authorized FreshDrop duties.
Access Rules
Staff must use individual accounts, strong passwords, MFA where available, approved devices, and least-privilege access. Staff must not export data, share screenshots, browse records out of curiosity, or use customer information for personal reasons.
Incident Reporting and Offboarding
Staff must report suspected account compromise, data misuse, lost devices, unauthorized access, or accidental disclosure immediately. On offboarding, FreshDrop must revoke access, recover devices, rotate shared credentials, and preserve necessary logs.