Privacy Policy

1. Introduction

This Privacy Policy describes how Ziffera (“ZRecipe”, “we”, “our”, “us”) collects, uses, discloses, and protects the personal data of visitors and users of our recipe costing platform available at zrecipe.ie.

We are the data controller for the personal data collected through the ZRecipe service. If you have any questions about this policy or your data, contact us at hello@zrecipe.ie.

2. What data we collect

Account data

Email address, name, business name, business type, hashed password. Collected when you create an account.

Business operational data

Recipes, ingredients, invoices you upload, supplier information, cost calculations. This data belongs to your business — we process it on your behalf to provide the service.

Payment data

Payment card details are collected and processed by our payment processor, Stripe. We do not store card details on our servers. We store only the Stripe customer ID and subscription status.

Technical data

IP address, browser type, device information, pages visited, timestamps. Collected automatically via server logs and used for security and service improvement.

AI-processed content

When you upload an invoice or recipe for AI extraction, the file is sent to our AI processing partner Anthropic (Claude) for the sole purpose of extracting structured data. Files are not retained by Anthropic beyond the processing window and are not used to train their models per our commercial agreement.

3. Legal basis for processing (GDPR Article 6)

• Contract: to provide the service you signed up for
• Legitimate interest: security, fraud prevention, service improvement
• Consent: for optional communications (marketing emails, if any)
• Legal obligation: tax records, invoicing law compliance

4. How we use your data

• Provide and improve the ZRecipe service
• Process payments and manage subscriptions
• Send transactional emails (account confirmations, ticket updates, invoices)
• Respond to support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your data. We do not use your business data for advertising or share it with third parties for commercial purposes.

5. Who we share data with (Sub-processors)

• Supabase (database + auth hosting) — EU region
• Vercel (application hosting)
• Stripe (payments)
• Resend (transactional email)
• Anthropic (AI processing)
• Zoho Mail (email inbox for support)

Each of these providers has signed a Data Processing Agreement with us and is contractually bound to protect your data. We do not share your data with any other third parties except when required by law.

6. Where we store data

Your data is stored in the European Union (Ireland region) on Supabase infrastructure. We do not transfer personal data outside the EU/EEA except to sub-processors listed above who provide equivalent safeguards under the EU-US Data Privacy Framework or Standard Contractual Clauses.

7. How long we keep data

• Account data: for as long as your account is active, plus 30 days after cancellation (for account recovery), then deleted
• Business data (recipes, invoices): same retention as account data. You can export or delete this anytime from within your account.
• Support tickets: retained for 2 years for record-keeping
• Server logs: 90 days
• Payment records: 7 years (Irish tax law requirement)

8. Your rights under GDPR

• Right of access: request a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure (“right to be forgotten”): delete your data
• Right to restrict processing
• Right to data portability: export your data in a machine-readable format
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie)

To exercise any of these rights, contact us at hello@zrecipe.ie. We will respond within 30 days.

9. Cookies

ZRecipe uses only strictly necessary cookies to keep you logged in and provide core functionality. We do not use tracking, advertising, or analytics cookies without your explicit consent.

10. Data security

We use industry-standard technical measures to protect your data: TLS encryption in transit, encryption at rest, row-level security policies isolating each business’s data, hashed passwords, and regular backups. Access to production data is restricted to authorised personnel only.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email or in-app notice at least 30 days before taking effect. The “Last updated” date at the top reflects the most recent change.

12. Contact

For privacy questions, data requests, or complaints:

Ziffera (CRO No. 784151)
Kilmartin Grove, Dublin 15, D15R2NF, Ireland
Email: hello@zrecipe.ie
Data Protection Commission (Ireland): dataprotection.ie