Borrador: este texto debe revisarlo un abogado antes de lanzar el servicio.
Este documento está disponible en inglés y polaco.
Privacy Policy
Effective from: [DATE]
1. Data controller
The controller of your personal data is [NAZWA FIRMY / IMIĘ I NAZWISKO], [ADRES], tax ID (NIP) [NIP]. Contact for data matters: [E-MAIL KONTAKTOWY].
2. What data we process
- Account: e-mail address, account ID and the language you chose.
- Use of the Service: links to the recipes you convert, the converted recipes in your history, the number and dates of conversions.
- Payments: subscription status and customer IDs at the payment providers. We don't see card details — Stripe, Apple or Google handle them.
- Security: IP address (server logs, bot protection) and a hash (SHA-256) of the e-mail address with the conversion date, used to count the free limit.
3. Purposes and legal bases
- Providing the Service and your account — Art. 6(1)(b) GDPR.
- Payments, billing and tax obligations — Art. 6(1)(b) and (c) GDPR.
- Security and abuse prevention (CAPTCHA, blocking temporary e-mail addresses, the free recipe limit) — legitimate interest, Art. 6(1)(f) GDPR.
- Contact and complaints — Art. 6(1)(b) and (f) GDPR.
4. Who processes data for us
- Supabase — database and login (servers in the EU).
- Vercel — hosting of the application server (Dublin region, Ireland).
- Google (Gemini API) — the content of the recipe page you convert. We don't send your e-mail address there.
- Stripe — payments in the extension and on the website.
- Apple, Google and RevenueCat — payments in the mobile app.
- Cloudflare (Turnstile) — bot protection.
- Resend — sending login codes.
Some providers may process data outside the European Economic Area (e.g. in the USA). This happens under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
5. How long we keep data
- Account data and history — until the account is deleted.
- Billing data — for the period required by tax law.
- The e-mail hash in the free-limit register — up to 3 months, also after the account is deleted.
- Server logs — up to [30] days.
6. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object. You can delete your account and data yourself in the extension, in the app or at /delete-account. You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) or with the data protection authority in your country.
7. Chrome extension
The extension reads the pages you visit in your browser only to recognise recipes — this happens locally and nothing is sent. The recipe content reaches our server only after you click “Convert”. On monsieur-cuisine.com the extension fills in the recipe form. It stores the login session, settings and recent recipes locally. We don't collect your browsing history.
8. Mobile app
The app keeps the login session in the phone's secure storage. It reads the clipboard only when you tap “Paste copied link”. You log in to Monsieur Cuisine directly on monsieur-cuisine.com — we don't see your password.
9. Cookies
We don't use advertising or analytics cookies. Cloudflare Turnstile may use technical cookies needed for it to work.
10. Changes
We announce significant changes to this policy by e-mail or in the Service.