Privacy Policy

What we collect

• Account details: your email address, password (stored encrypted — we can't see it), and the restaurants and roles you belong to.
• Business data you enter: invoices and their photos/PDFs, ingredients, recipes, menu, inventory counts, waste, sales, labor hours and pay rates, SOPs, checklists, temperature logs, inspections and compliance documents.
• Employee information you add: names, positions, pay rates and hours. If you add this, you're responsible for having the right to share it with us.
• Billing: handled by Stripe. We see your plan and payment status and the last digits of your card; we never see or store full card numbers.
• Technical data: basic logs (such as IP address, browser and error reports) kept to keep the service secure and working, and a few cookies needed to keep you signed in and remember your selected location. We don't use advertising cookies or sell data.

How we use it

• To provide ChopOps: calculate costs, show reports, send sign-in, invite and password-reset emails, and process your subscription.
• To keep the service secure, fix problems and improve it.
• To contact you about your account, billing, or important changes.

We don't sell your information or use your business data to advertise to you.

Who we share it with

Only the service providers that run ChopOps for us, each under their own security and privacy commitments:

• Supabase — database, sign-in and file storage.
• Vercel — hosting the app.
• Stripe — payments and invoices.
• Anthropic — reading uploaded invoice images with AI. Invoice files are sent only for that purpose and are not used to train AI models.
• Resend — sending account emails.

These providers may store data outside your country, including in the United States. We may also disclose information if required by law.

Who in your business can see it

Data belongs to the restaurant account. Owners decide who is invited and their role; for example, only owners and managers can see pay rates and labor costs.

How long we keep it

We keep your data while your account is active. If you cancel, we keep it for at least 30 days so you can come back or export it, then delete it on request or after a reasonable period. Backups are cycled out over time. Billing records may be kept longer where the law requires.

Your choices and rights

• Export your data any time from Reports.
• Ask us for a copy of your personal information, to correct it, or to delete your account and data.
• Depending on where you live (for example under Canada's PIPEDA or the GDPR), you may have additional rights, including complaining to your privacy regulator.

To make a request, email nocodegreen@gmail.com.

Security

Data is encrypted in transit and at rest by our providers, each restaurant's data is kept separate with database-level access rules, and passwords are never stored in plain text. No system is perfectly secure; if a breach affects your information we'll tell you as the law requires.

Changes

If we change this policy in a meaningful way, we'll update the date above and let account owners know.