Privacy Policy

1. Introduction

Welcome to Riff.kitchen ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights.

2. Data We Collect

We collect several different types of information for various purposes to provide and improve our Service to you:

• Identity Data: First name, last name, username, or similar identifier (managed via Clerk Auth).
• Contact Data: Email address.
• Usage Data: Information about how you use our website, products, and services (e.g., recipes generated, pantry items).
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.

3. Payment Information

We do not store your full payment information (credit card numbers) on our servers. All payments are securely processed by our Merchant of Record, Paddle.com.

Paddle acts as a data controller for payment information. We recommend reading Paddle's Privacy Policy to understand how they handle your payment data.

4. How We Use Your Data

• To provide and maintain our Service.
• To notify you about changes to our Service.
• To allow you to participate in interactive features (e.g., Community Cookbook).
• To provide customer support.
• To monitor the usage of our Service.
• To detect, prevent and address technical issues.

5. Third-Party Services

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, or to assist us in analyzing how our Service is used.

• Clerk: For authentication and user management.
• Supabase: For database and storage services.
• Google Gemini API: For AI recipe generation. (Inputs sent to AI are anonymized where possible).
• Paddle: For payment processing.
• PostHog: For product analytics and improving user experience.
• Google Analytics: For website traffic analysis.

6. Data Retention & Deletion

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. You can request deletion of your account and all associated data at any time by contacting us or using the "Delete Account" feature in your profile settings.

7. Your Rights

Depending on your location, you may have rights under data protection laws (such as GDPR or CCPA) including the right to access, correct, update, or delete your personal data. Please contact us at ask@riff.kitchen to exercise these rights.