Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how [COMPANY LEGAL NAME] ("we", "us" or "our") collects, uses and shares information when businesses and their staff use FoodLabel App (the "Service"), and when people visit our website. FoodLabel App is a business tool: our customers are food businesses, and the people who use it are usually their owners, managers and staff.

1. Information we collect

Information you give us

• Account information: your name, email address and password (stored only as a secure one-way hash), and the role assigned to each user.
• Business information: business name, location names, "Packaged by" names and addresses, and timezones.
• Content you enter ("Customer Data"): menu items, prices, weights, barcodes, ingredients, allergens, nutrition values, shelf lives, prep items, and daily production, sales and waste figures.
• Communications: messages you send us, such as support requests.

Billing information

Payments are handled by Stripe, Inc. Your full card details go directly to Stripe and are never stored on our servers. Stripe shares limited information with us, such as your subscription status, plan, billing email, and the card brand and last four digits, so we can manage your subscription. Stripe's use of your information is governed by its own privacy policy.

Information collected automatically

• Usage and log data: such as IP address, browser type, device type, pages requested, the date and time of requests, and errors. We use this to run, secure and troubleshoot the Service.
• Activity in the app: such as the number of labels printed and when, which is part of how the Daily Production report works.

2. How we use information

• To provide the Service: creating accounts, signing you in, printing labels, calculating dates and production totals, and syncing data across your devices.
• To manage subscriptions, billing and free trials.
• To send service emails, such as password resets, billing notices and important changes. We don't send marketing emails unless you've agreed to receive them, and you can opt out at any time.
• To provide support and respond to your requests.
• To keep the Service secure, prevent fraud and abuse (for example, limiting repeated sign-in attempts), and fix problems.
• To understand how the Service is used in aggregate and improve it.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use Customer Data for advertising.

3. How we share information

We share information only as described here:

• Service providers who help us run the Service under contracts that limit their use of the data, including our hosting provider, our email delivery provider and Stripe for payments.
• Fonts: our public web pages load the Inter typeface from Google Fonts, which means your browser contacts Google's servers and Google receives your IP address when you view those pages.
• Within your business: users in your account can see data according to their role (for example, managers can see production reports for their business).
• Legal reasons: when we believe in good faith that disclosure is required by law, subpoena or court order, or is needed to protect the rights, property or safety of us, our customers or others.
• Business transfers: in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply to the transferred information.
• With your permission or at your direction.

4. Customer data and our role

Our customer (the business that holds the FoodLabel App account) controls the Customer Data in its account and decides who has access to it. We process Customer Data on the customer's behalf to provide the Service. If you are a staff member and want to access, correct or delete information in your employer's account, please contact your employer first; we'll help them respond.

5. Cookies

We use a single essential cookie to keep you signed in securely. It is required for the Service to work and isn't used for advertising or cross-site tracking. We don't use third-party advertising or analytics cookies. Your browser may also store small amounts of app data locally (for example, preferences) on your device.

6. Data retention

• We keep account information and Customer Data for as long as your account is active.
• After an account is cancelled or terminated, we keep Customer Data for 30 days so it can be reactivated or exported, then delete it from our active systems. Backup copies are overwritten in the normal backup cycle within 90 days.
• Password reset links expire after 1 hour.
• We keep billing and tax records, and limited logs needed for security, for as long as required by law or for legitimate business purposes.

7. Security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS), hashed passwords, signed session cookies, role-based access within each account, and limits on repeated sign-in attempts. No method of transmission or storage is completely secure, so we can't guarantee absolute security. Please use a strong, unique password and keep it private.

8. Your choices and rights

• You can view and update much of your information in the app, and change your password at any time.
• Account owners can export production reports in CSV format and can ask us to delete their account and Customer Data.
• Depending on where you live (for example, California or the European Economic Area / UK), you may have rights to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and not to be discriminated against for exercising these rights.

To make a request, email [CONTACT EMAIL]. We may need to verify your identity, and we'll respond within the time required by applicable law.

9. Where data is processed

We are based in the United States and the Service is hosted with providers that may process data in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

10. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify account owners by email or in the app before the changes take effect. The "Last updated" date above shows when it was last changed.

12. Contact

Questions or requests about privacy? Contact [COMPANY LEGAL NAME] at [CONTACT EMAIL].