Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account and profile data: sign-in identifiers, name, email, avatar, and account settings.
• Recipe and content data: recipe URLs you import, ingredients, instructions, notes, edits, collections, publishing choices, and related metadata.
• Usage and device data: log events, interaction data (such as saves/likes/views), browser type, and IP-derived diagnostics used for security and operations.
• Payment and subscription data: subscription status and billing metadata processed through Stripe. RecipBee does not store full payment card numbers.
• Support and legal communications: messages and attachments you send to us (for example, rights or infringement reports).

2. Sources of information

• Information you provide directly when you create or use an account.
• Information generated through your use of the service, including publishing and cookbook interactions.
• Information from third-party services you choose to use, including sign-in providers, Supabase (auth/database/storage infrastructure), and Stripe.

3. How we use information

• Provide, secure, maintain, and improve RecipBee.
• Authenticate users and manage accounts and subscriptions.
• Store recipes, notes, cookbook content, and sharing preferences.
• Process payments and prevent fraud/abuse.
• Communicate with you about service updates, support, and legal matters.
• Comply with legal obligations and enforce our terms.

4. GDPR/UK legal bases for processing

Where GDPR or UK GDPR applies, we rely on these legal bases:

• Contract: to provide the RecipBee service you request.
• Legitimate interests: to secure, operate, and improve the platform, and prevent misuse.
• Legal obligation: where required by law, accounting, or enforcement needs.
• Consent: where legally required and obtained; you may withdraw consent at any time.

5. Cookies and similar technologies

RecipBee uses cookies and similar technologies for core functionality such as sign-in/session management, security protections, and service reliability. We may also use measurement tools to understand product usage and performance. You can control cookies through your browser settings, but blocking essential cookies may affect service functionality.

6. Sharing and disclosures

We may share personal data with:

• Infrastructure and processors: including Supabase (authentication, database, storage) and Stripe (subscription billing).
• Service providers: vendors supporting hosting, security, support, and operations under appropriate safeguards.
• Legal/compliance recipients: where required by law, legal process, or to protect rights, safety, and platform integrity.
• Business transfers: in connection with a merger, acquisition, financing, or asset transfer.

We do not sell personal data for money. If you publish recipes publicly, public-facing content and selected profile information will be visible to others as part of the service.

7. International data transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers, such as contractual protections and equivalent transfer mechanisms.

8. Data retention

We retain personal data for as long as needed for the purposes described in this policy, including account operation, legal compliance, dispute resolution, and enforcement. Typical retention periods depend on data type:

• Account and recipe content: retained while your account is active, and then deleted or de-identified within a reasonable period unless legally required otherwise.
• Billing and transaction records: retained as required for tax, accounting, and regulatory obligations.
• Security and operational logs: retained for limited periods necessary for security and reliability.

9. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing. You may also withdraw consent where processing is based on consent.

To exercise rights, contact tim@palmbaydigital.com. We may need to verify your identity before processing a request.

If GDPR/UK GDPR applies and you believe your rights were not handled appropriately, you may lodge a complaint with your local supervisory authority.

10. Security

We use reasonable technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

RecipBee is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us so we can review and delete it where appropriate.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the effective date above. Material changes may be communicated through the service or by other appropriate means.