Privacy Policy

1. Information We Collect

Information you provide directly:

• Waitlist registration: your email address and the source of your sign-up (e.g., homepage, footer).
• Creator inquiry: name, social media handle, approximate follower count, and an optional description of your audience.
• Account (post-launch): name, email, password, and goal data such as weight, dietary preferences, and macro targets.

Information collected automatically:

• Analytics: We use Vercel Analytics, a privacy-preserving tool that does not use cookies, does not track individuals across sessions, and does not share data with third-party advertisers.
• Log data: Standard server logs may include your IP address, browser type, referring URL, and pages visited. Logs are retained for up to 30 days for security purposes.

2. How We Use Your Information

• To notify waitlist members when the Service launches.
• To review and respond to creator partnership inquiries.
• To create and manage your account and provide the core Service features.
• To personalize your meal plans based on the goal data you provide.
• To improve the Service through aggregated, anonymized analytics.
• To send transactional emails (e.g., account confirmation, password reset). We do not send marketing emails without your explicit opt-in.
• To investigate and prevent fraud, security incidents, or violations of our Terms.

3. Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party. We may share information only in the following limited circumstances:

• Service providers: Trusted vendors who help us operate the Service (e.g., Supabase for database hosting, Resend for transactional email, Vercel for hosting). These providers are contractually bound to use your data only to perform services on our behalf.
• Legal requirements: If required by applicable law, court order, or lawful government request.
• Business transfer: In connection with a merger, acquisition, or sale of assets. We will notify you before your information becomes subject to a materially different privacy policy.
• Protection of rights: To protect the rights, property, or safety of PlatePal, our users, or the public.

4. Data Retention

Waitlist and creator inquiry data is retained until you request deletion or until it is no longer needed. Account data is retained for as long as your account is active. Upon a deletion request, we will remove or anonymize your personal information within 30 days, except where retention is required by law.

5. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To exercise these rights, contact us at hello@getplatepal.com.

6. Security

We implement industry-standard security measures including HTTPS/TLS encryption in transit, access controls, and secure credential storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We are not liable for unauthorized access or disclosure beyond our reasonable control.

7. Children

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and revising the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

9. Contact

Questions about this Privacy Policy? Reach us at hello@getplatepal.com or write to Platepal Inc., Toronto, Ontario, Canada.