Recipalyze is a multi-tenant software platform built for restaurant operations. This policy applies to information processed through the Recipalyze web app, invited team accounts, support interactions, connected integrations, and any reports, analytics, or AI-assisted insights generated inside a Recipalyze workspace.

Each restaurant workspace is intended to remain logically isolated from every other workspace. Access to data inside a workspace is controlled by account roles, permissions, and server-side authorization checks.

Depending on how Recipalyze is used, we may process:

• Account details such as name, email address, login credentials, and verification status.
• Restaurant profile data such as business name, workspace settings, invited users, roles, and permissions.
• Operational and financial data entered into the product, including ingredients, recipes, cost snapshots, inventory movements, waste, orders, order items, expenses, reports, and analytics inputs.
• Integration data made available by connected services, such as spreadsheets or other approved third-party tools.
• Technical and usage information such as browser type, IP address, device information, timestamps, pages accessed, and actions taken inside the product for reliability, security, and audit purposes.
• Communications and support records, including messages sent to us when requesting help, account changes, or troubleshooting.

We use information to operate and improve Recipalyze, including to:

• authenticate users, secure accounts, and enforce workspace-level permissions;
• calculate recipe costs, margins, stock movement history, food cost performance, and related analytics;
• maintain multi-tenant isolation, detect misuse, investigate errors, and protect the service from fraud or unauthorized access;
• send transactional messages such as invitations, verification emails, and essential product notices;
• provide customer support, respond to requests, and improve the product experience;
• comply with legal obligations and maintain appropriate financial, security, and operational records.

Some Recipalyze features may generate financial or operational insights from data stored in your workspace. These outputs are meant to help restaurants review trends, exceptions, and opportunities more quickly.

AI-assisted outputs are generated from the information available at the time of analysis and may depend on configuration quality, ingredient costs, order structure, and other records supplied by the restaurant. They should be reviewed by the restaurant before being used for purchasing, pricing, staffing, accounting, or other business decisions.

We process information as needed to provide the service requested by our customers, to secure and improve the platform, to communicate about the service, and to comply with legal obligations. Where required by applicable law, we also rely on legitimate interests, consent, or other lawful bases relevant to the relationship.

We may share information only as reasonably necessary to operate Recipalyze, including with:

• service providers that help us host the product, authenticate users, send email, analyze reliability, or support integrations;
• authorized users within the same restaurant workspace, according to the permissions granted by that workspace;
• professional advisers, regulators, or law enforcement when disclosure is legally required or reasonably necessary to protect rights, safety, or the integrity of the service;
• a successor entity if Recipalyze is involved in a merger, acquisition, financing, or transfer of assets, subject to appropriate confidentiality obligations.

We do not disclose customer-provided restaurant operational data to unrelated third parties for their own independent marketing use except where the customer directs us to do so.

Recipalyze is designed with multi-tenant isolation, role-based access control, and server-side authorization in mind. We use reasonable administrative, technical, and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction.

No service can promise absolute security. Customers are responsible for keeping account credentials secure, assigning roles carefully, and promptly removing access for users who no longer need workspace permissions.

We retain information for as long as needed to provide the service, maintain legitimate business records, resolve disputes, enforce our agreements, and comply with legal obligations. Operational records may remain in backups or logs for a limited period after deletion or account closure where reasonably necessary for security, continuity, or compliance.

Subject to applicable law and your role in the relevant workspace, you may request access to, correction of, export of, or deletion of personal information associated with your account. Workspace owners generally control restaurant data submitted by their teams.

You may also manage certain permissions, update profile information, disconnect integrations, or stop using the service at any time. Some requests may be limited where data must be retained for security, contractual, accounting, or legal reasons.

Recipalyze may use infrastructure and service providers located in more than one country. By using the service, you understand that information may be processed in jurisdictions other than your own, subject to appropriate safeguards where required by law.

Recipalyze is intended for business use and is not directed to children. If we learn that personal information has been submitted in violation of applicable law, we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time to reflect product changes, legal developments, or operational needs. When we make material updates, we will revise the effective date above and may also provide additional notice inside the product or through account communications.

Privacy and data handling questions should be sent through the support channel, account communication method, or written agreement associated with your Recipalyze workspace so we can verify the request and route it to the right team.