Receptree Privacy Policy

1. Scope

This policy explains how we process personal data when you use Receptree, including the website, account services, support channels, and optional camera bridge features.

2. Data We Process

• Account data: name, email, login metadata, authentication identifiers.
• Profile and content data: recipes, uploads, collections, favorites, comments.
• Technical and security data: IP, user agent, logs, device and browser metadata.
• Consent records: terms/privacy acceptance version, timestamp, and related metadata.
• Payment data via Stripe: subscription status and billing identifiers.

3. Purposes and Legal Bases

• Service delivery and account operations (contract necessity).
• Security, abuse prevention, and platform integrity (legitimate interests).
• Billing and subscription handling (contract and legal obligations).
• Analytics and optional marketing where required by consent.
• Compliance with legal obligations and defense of legal claims.

4. Processors and Data Sharing

We use selected service providers to operate Receptree:

• Supabase (authentication, database, storage).
• Vercel (application hosting and delivery).
• Stripe (payments and billing).
• Email delivery providers for support and transactional communication.
• Analytics providers where consent applies.

We do not sell personal data. We may disclose data when legally required or to protect rights, safety, and platform security.

5. International Transfers

Receptree is used globally. Data may be processed outside Switzerland or your residence country, including jurisdictions such as the EU and the USA.

Where required, we apply contractual and technical safeguards (for example, standard contractual clauses or equivalent mechanisms).

6. Retention

• Account data is retained while your account is active.
• Content is retained until you delete it or delete your account.
• Security and legal logs may be retained as needed for fraud prevention, legal defense, and compliance.
• Backups may persist for a limited period after deletion before automated overwrite.

7. Your Rights

Depending on applicable law (for example Swiss FADP, GDPR, UK GDPR, or certain US state laws), you may have rights to access, correction, deletion, objection, restriction, withdrawal of consent, and portability.

You can request exercise of rights via privacy@novasas.ch. We may request identity verification.

8. Cookies and Similar Technologies

We use essential cookies for security and login, and optional analytics/marketing cookies where consent is required. See our Cookie Policy for details and controls.

9. Children

Receptree is not intended for children under 16, or lower age thresholds only where local law permits and parental authorization requirements are met.

10. Security

We apply technical and organizational safeguards appropriate to risk, including access controls, transport encryption, and security monitoring. No system is fully risk-free.

11. Policy Updates

We may update this policy. Material updates may be announced via email, in-app notices, or on the website.

12. Contact