A Blog Cover Single Image
A Client Image
Evan Knox
Cofounder, Homegrown
E-commerce

Who Owns Your Customer List on a Food Platform?

The short version: "Ownership" is the wrong question, and asking it produces reassuring answers that mean nothing. There are four separate things and you can have any one without the others: access (can you see it), portability (can you take it), permission (may you actually use it), and exclusivity (can they use it too). A marketplace can leave you owning a list you may not email. A storefront can give you a full export with no consent record, which is addresses rather than a mailing list. Ask about all four, and the honest test is not what the terms say but what the export file contains.

Why is "who owns it" the wrong question?

Because almost every platform will say you do, and it settles nothing.

"You own your data" is true and close to meaningless on its own. Ownership does not tell you whether you can retrieve the data, whether you may lawfully email the people in it, or whether the platform is also using it. Those are the things that decide what a customer list is actually worth to you.

So replace one question with four:

  1. Access. Can you see contact details at all, right now?
  2. Portability. Can you get them out, in a usable file, on your plan?
  3. Permission. Are you allowed to market to these people?
  4. Exclusivity. Can the platform contact them too?

A list scoring well on all four is an asset. A list scoring well on one is a dashboard.

Access: can you see it at all?

The first divide, and it splits cleanly by business model.

Storefronts give you contact details as a matter of course. Square, Shopify, Squarespace, Wix, Big Cartel, Bake.Shop, Bakesy and the rest all show you who ordered, with an email address and usually a phone number. The customer is yours; the platform is plumbing.

Marketplaces are different by design, because the customer arrived through them. Etsy's policies restrict using its messaging to direct buyers off the platform, which means that even where you can see an order, the relationship is fenced. That is not hostile: Etsy introduced you, and it is protecting the introduction it made.

Which produces a genuine strategic difference. On a storefront you are building a list. On a marketplace you are renting access to theirs, and the compliant way to convert one into the other is a card in the box rather than a message. Our comparison of Square Online against Etsy covers what that fence is worth in fees, which is roughly 6.8 percentage points.

Portability: can you get it out?

Where the theory meets a file, and where the surprises live.

Most platforms export. What varies is what, in what format, and on which plan.

The published example worth knowing: StandScout lists inventory export on its $9.99 Starter tier and data export and reports on Pro at $29.99. So export capability is itself a paid feature, which produces a trap nobody anticipates: a vendor who downgrades to a cheaper plan before migrating can find the export they needed sits behind the plan they just left.

Three questions that settle portability:

  • What exports on my tier, specifically contacts, orders, and products?
  • Does downgrading remove export access?
  • How long after cancellation can I still retrieve it?

And one instruction that beats all three: test it. Load five real customers into a trial, export, and open the file. Five minutes, at the only point in the relationship where finding a problem costs nothing.

Permission: may you actually use it?

The dimension nobody checks, and the one that determines whether the file is a list or a spreadsheet.

Marketing email requires consent, and consent is a property of each individual contact rather than of your list as a whole. So an export of 400 addresses with no record of who opted in, who never did, and who unsubscribed is not a mailing list. It is 400 addresses you cannot honestly use.

What you want in the file:

  • A subscribed or opt-in flag, ideally with a date
  • An unsubscribed flag, which is the critical one, because those people must stay unsubscribed
  • The source, so a newsletter signup is distinguishable from a checkout box
  • Bounce or complaint history, if tracked

Shopify exports customers with marketing consent status included, which is genuinely good and not universal. Many platforms do not, and the honest response when consent is missing is to re-permission from the old system while you still can: one message asking people to confirm, then start clean.

That is a painful sentence to write and it is much better than importing an unmarked list and emailing someone who unsubscribed from you last year. The FTC's privacy and data security guidance for businesses covers your responsibilities for the data you now hold, which are yours regardless of which system it came out of.

Exclusivity: can the platform use it too?

Rarely asked, occasionally significant, and answerable by searching the terms.

Search for license, marketing, and third part in the privacy policy and terms. What you are looking for is whether the platform may contact your customers for its own purposes, and whether it may share or sell data.

The distinction worth holding:

  • Transactional contact on your behalf, such as order confirmations, is necessary and fine
  • The platform marketing its own services to people who bought from you is a different thing
  • Sharing with third parties for their marketing is a different thing again

Most reputable platforms in this category do none of the second or third. It is still a two-minute search, and the answer tells you something about how the company thinks about the relationship.

Marketplaces are the honest exception: the customer is genuinely theirs as well as yours, and they will market to that person constantly. That is the deal, and it is disclosed.

What does this mean in practice?

Four rules that fall out of the four dimensions.

Build the list where you can keep it. A storefront customer is yours. A marketplace customer is shared, and the conversion route is a package insert rather than a message.

Export quarterly, with consent status, and check the file opens. Five minutes a quarter, and it makes every other question on this page less consequential.

Own the channel, not just the data. An email or text list you hold means you can reach people without any platform's permission or cooperation. Our guide to building a customer email list covers doing that properly from the start.

Own your domain. About $15 a year, and it means the address your customers learned survives any platform decision. That is the habit half of ownership, as opposed to the data half.

What is the customer list actually worth?

Worth putting a number on, because it changes how much care this deserves.

A food business with 200 regular customers who each spend $300 a year is a $60,000 business, and the list is the asset that produces it. Not the recipes, not the storefront, not the photographs: the two hundred people who have decided to buy from you.

Which reframes the whole question. Nobody would keep the only copy of a $60,000 asset in a system belonging to someone else, with no backup, and no record of who agreed to be contacted. Written down like that, the quarterly export stops being admin and starts being obvious.

Our guides to getting repeat customers and segmenting an email list by order history cover using the list once you genuinely hold it, which is where the value actually gets realised.

How do you test this in ten minutes?

Because every question on this page has an answer you can obtain yourself, and reading terms is the slow way to get it.

The test, on any platform with a trial or a free tier:

  1. Create five customers by placing five orders with different addresses. Use variations of your own email if you need to.
  2. Tick the marketing opt-in on three of them and leave two unticked, so the file has something to distinguish.
  3. Find the export. Note how long it takes you, because if it is hard to find while you are looking for it, it will be worse under pressure.
  4. Open the file. Count the columns.
  5. Look for the consent column. This is the whole test.
  6. Try it on the cheapest plan you would realistically run, since export is sometimes tiered.

What you learn in those ten minutes is worth more than any answer a sales conversation produces, because it is the actual file rather than a description of one. And it costs nothing, at the only point in the relationship where discovering a problem is free.

Run it on the platform you already use as well. Most vendors have never opened their own export, and the common outcome is finding either that consent status is missing, or that it has been there all along and the list is more usable than they thought.

You can run the same test on a trial here and put the resulting file next to whatever your current platform produces. Two files on a screen settle this faster than any amount of policy reading.

What should you ask before signing up?

Six questions, all answerable in an email, none on a pricing page.

  1. Can I see customer contact details for every order?
  2. What exports on my tier: contacts, orders, products, and in what format?
  3. Does the export include email marketing consent status?
  4. Does downgrading or cancelling remove export access, and for how long can I retrieve data afterwards?
  5. May you contact my customers for your own marketing?
  6. Is any data shared with third parties, and can I opt out?

Question three is the one that separates a list from a spreadsheet. Question four is the one that catches people at exactly the wrong moment.

If a platform answers all six clearly, that is a meaningful signal in itself. A company confident that you will stay because the product is good tends to be relaxed about how easily you could leave.

What if you are already on a platform that scores badly?

Fix what you can, which is more than it sounds.

  1. Export what exists today, even if consent status is missing. Having the addresses is better than not.
  2. Re-permission deliberately: one message from the current system asking people to confirm they want to hear from you.
  3. Start collecting consent properly from now on, with a clear checkbox and a record of the date.
  4. Add a direct channel you control, so future contact does not depend on the platform.
  5. Buy your domain, so the address survives whatever you decide next.

None of that requires switching platforms, and all of it makes switching easier later. The National Archives' records management guidance is written for institutions and its principle applies: decide what counts as a record, and keep it somewhere you control rather than relying on a vendor to preserve it.

If you want a storefront where contact details are yours as a matter of course, Homegrown is $10 a month billed annually with 0% commission and 2.9% plus $0.30 processing published up front, and it handles pickup at each place you sell with its own schedule and cutoff, local delivery with a radius and a route, and sales tax calculated, filed, and remitted in all 50 states. The honest bounds: it is not a marketplace and brings you no traffic, plus no national shipping, no point-of-sale, and no app ecosystem. Apply the same standard here as anywhere on this page: do not take the claim, test the file. You can load a few real customers into a trial and immediately export them, which answers questions two and three in about five minutes and is worth running against every candidate including the one you already use.

How do the main options compare?

Every platform below shows the same four commercial facts, because a table that lists one platform's transaction fee and not another's is not a comparison. "Not published" means exactly that: the company does not state it publicly.

PlatformAccess to customer contact detailsSubscription (annual)Free trialPlatform feeCard processing
ShopifyFull export including marketing consent status$29/mo Basic3-day trial, then $1/mo for 32% platform fee if not on Shopify Paymentsfrom 2.9% + $0.30 processing
Square OnlineCustomer export, consent status not guaranteedFree tier; paid from $29/mo per location30-day trial on paid plans$0 platform fee3.3% + $0.30 free tier, 2.9% + $0.30 paid
EtsyPolicy restricts directing buyers off the platformNo subscriptionn/a$0.20 listing + 6.5% commission3.0% + $0.25 processing
StandScoutExport gated behind the $29.99 tierFree to $59.99/mo (monthly only)No card required on free tierNo checkout, so no platform feeNo checkout, so no processing
HomegrownContact details yours as a matter of course$10/mo billed annually7-day free trial$0 platform fee (0% commission)2.9% + $0.30 processing
Big CartelCustomer export availablePlatinum $12/mo ($144/yr)7-day free trial$0 platform feeYour own provider, so 2.9% + $0.30 typical

Frequently asked questions

Who owns my customer list on an ordering platform?

Almost every platform will say you do, and it settles nothing on its own. Ask instead about access, portability, permission, and exclusivity, which are four separate things you can have independently.

What is the difference between owning and being able to use a list?

Permission. Marketing email requires consent per contact, so an export with no record of who opted in and who unsubscribed gives you addresses rather than a mailing list you may lawfully use.

Do marketplaces let me keep my customers?

Not in the same way. Etsy's policies restrict using its messaging to direct buyers off the platform, so the compliant route to your own Etsy customers is a card in the box rather than a message.

Can export be a paid feature?

Yes. StandScout lists inventory export on its $9.99 tier and data export on Pro at $29.99, which means downgrading before you migrate can remove the thing you needed.

Which platforms export consent status?

Shopify exports customers with marketing consent status included, which is genuinely good and not universal. Where it is missing, re-permission from the old system before leaving rather than importing an unmarked list.

How do I check any of this properly?

Test the file rather than reading the claim. Load five real customers into a trial, export, and open it. Five minutes, at the only point where finding a problem costs you nothing.

What if my current platform scores badly?

Export what exists now, re-permission deliberately with one message, start recording consent properly, add a direct channel you control, and buy your domain. None of that requires switching, and all of it makes switching easier.

The bottom line

Stop asking who owns the list. Ask the four questions that actually decide what it is worth: can you see it, can you take it, may you use it, and can they use it too?

The one that catches nearly everyone is permission. A complete export with no consent record is 400 addresses you cannot honestly email, and the fix, re-permissioning from the old system, is only available while you still have the old system.

Then do the thing that makes all four less consequential. Export quarterly with consent status, keep a direct channel you control, and own your domain. A food business with 200 regulars spending $300 a year is a $60,000 business built on that list, and nobody would knowingly keep the only copy of a $60,000 asset in someone else's system with no backup.

About the Author

Evan Knox is the cofounder of Homegrown, where he works with hundreds of small food vendors across the country to sell online. He and his cofounder David built Homegrown after seeing how many local vendors were stuck taking orders through DMs and cash-only sales.

Your Store Could Be Live Tonight

15 minutes. That's all it takes. Add your products, share your link, and start taking orders. Free for 7 days.
Start Your Free Trial
Start Your Free Trial

7-day free trial · $10/mo after · Cancel anytime