Privacy Policy

Last updated: August 31, 2026

This policy explains what [COMPANY LEGAL NAME] ("we") collects when you use Labelara, why, and what your choices are. The short version: we collect the minimum needed to run the service, your recipes are confidential business information, and we never sell your data.

1. What we collect

• Account data: your email address (used for magic-link sign-in and service messages).
• Your content: recipes, custom ingredients, and label settings you save. Until you sign up, guest drafts live only in your browser's local storage — not on our servers.
• Billing data: handled by Paddle, our merchant of record (see section 3). We never see or store your card number; we receive subscription status and transaction identifiers.
• Usage data: aggregated page analytics (cookieless) and product events such as "a calculation was performed". Product events carry only identifiers and counters — never the contents of your recipes.

2. Recipes are confidential

Your recipes are your trade secrets. We do not read them except when needed to operate the service or when you explicitly ask for support on a specific recipe, we do not use them to train models or build datasets, and we exclude their contents from logs and analytics.

3. Payments — Paddle as an independent controller

Checkout and payments are operated by Paddle as our merchant of record. Paddle is an independent data controller of the data you provide at checkout (name, email, payment method details, transaction data, and location data used for tax calculation) — it decides how that data is processed under its own privacy policy. For US customers the Paddle contracting entity is Paddle.com Inc. (Astoria, New York, USA); the group parent is Paddle.com Market Limited (London, UK).

4. Service providers acting on our behalf

• Resend — transactional email (magic links, receipts);
• Plausible — cookieless, aggregate website analytics;
• PostHog — product usage events (IDs and counters only);
• our hosting providers, which store application data and backups.

5. Cookies and local storage

We use an essential session cookie to keep you signed in, and browser local storage to keep your guest draft on your device. We do not use advertising cookies or cross-site tracking.

6. Retention and deletion

We keep your data while your account exists. Deleting your account (from the Account page) removes your recipes and personal data within 30 days, except records we must keep for tax and accounting purposes, which are retained by Paddle and us as required by law.

7. Your rights

Depending on where you live (including under the CCPA for California residents), you may have rights to access, correct, export, or delete your personal data. Email [SUPPORT EMAIL] and we will honor verified requests within the legally required time frame. We do not sell personal information.

8. Security

Data is encrypted in transit; access to production data is limited to the people who operate the service. No system is perfectly secure — report concerns to [SUPPORT EMAIL].

9. Changes and contact

We will announce material changes to this policy on the site or by email. Questions: [SUPPORT EMAIL].