Privacy Policy

1. Introduction

Gather Cook Corp. ("we," "us," or "our") operates the GATHER platform at gathercook.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using GATHER, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an Account: Email address, username, password, display name, profile picture, bio
• Create Content: Recipes, meal plans, shopping lists, comments, likes, and ratings
• Subscribe: Payment information (processed securely by Stripe), billing address, subscription preferences
• Import Videos: URLs of videos you import, extracted recipe data from those videos
• Contact Us: Name, email, and message content when you contact support
• Use Features: Preferences, settings, and other information related to your use of the Service

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Usage Data: Pages viewed, features used, time spent on the Service, search queries, interaction with recipes
• Device Information: IP address, browser type and version, operating system, device type, unique device identifiers
• Analytics Data: For Chef accounts, we track recipe views, likes, comments, and engagement metrics
• Log Data: Server logs including IP addresses, access times, and error reports

2.3 Information from Third Parties

We may receive information from:

• Social Login Providers: If you authenticate using third-party services, we receive basic profile information
• Payment Processors: Stripe provides us with payment confirmation and subscription status
• Video Platforms: When you import videos, we collect publicly available metadata from YouTube and other platforms

3. How We Use Your Information

We use your information to:

3.1 Provide and Improve the Service

• Create and manage your account
• Enable you to create, save, and share recipes
• Generate meal plans and shopping lists
• Process video imports and AI-powered recipe extraction
• Display personalized content and recommendations
• Improve our AI algorithms and features
• Analyze usage patterns to enhance user experience

3.2 Process Payments and Subscriptions

• Process subscription payments through Stripe
• Manage your subscription status and billing
• Send receipts and billing notifications
• Prevent fraud and unauthorized transactions

3.3 Communicate with You

• Send important Service updates and security alerts
• Respond to your support requests and feedback
• Send notifications about activity on your content (likes, comments, follows)
• Provide customer support and resolve issues

3.4 Analytics and Business Operations

• Provide Chef users with analytics about their recipes and audience
• Monitor and analyze Service performance and usage trends
• Conduct research and development for new features
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations and protect our rights

4. AI and Data Processing

4.1 Google Gemini AI

We use Google Gemini AI to process:

• Video Transcription: Audio from imported videos is sent to Google's servers for transcription
• Recipe Extraction: Video metadata and transcripts are analyzed to extract recipe information
• Ingredient Normalization: Ingredient names are processed to create smart shopping lists

Data sent to Google Gemini is processed according to Google's AI services terms and privacy policy. We do not use your data to train Google's AI models beyond the scope of providing our Service.

4.2 Data Retention for AI

Extracted recipe data is stored in our database. Original video transcripts may be cached temporarily to improve performance. We do not retain raw audio files after transcription.

5. Third-Party Services

We use the following third-party services that may collect and process your data:

5.1 Supabase

Cloud database and authentication service. Stores user accounts, profiles, recipes, and all Service data. View Supabase's privacy policy at: supabase.com/privacy

5.2 Stripe

Payment processing service. Handles all payment information, credit card processing, and subscription billing. We never store your full payment card details. View Stripe's privacy policy at: stripe.com/privacy

5.3 Google Gemini AI

AI service for recipe extraction and processing. Processes video metadata, transcripts, and ingredient data. View Google's privacy policy at: policies.google.com/privacy

5.4 YouTube Data API

Used to fetch video metadata for recipe imports. We access only publicly available video information (title, description, thumbnail). View YouTube's terms at: developers.google.com/youtube/terms

5.5 Resend

Email delivery service. Sends transactional emails including account notifications and support responses. View Resend's privacy policy at: resend.com/legal/privacy-policy

5.6 Affiliate Partners

Chef users may include affiliate links to Amazon, Walmart, and Target. When you click these links, you are subject to those platforms' privacy policies. We receive aggregate statistics about link performance but do not receive personal information about your purchases.

6. Data Sharing and Disclosure

6.1 Public Information

The following information is publicly visible to other users:

• Your display name, username, profile picture, and bio
• Recipes you publish (including ingredients, steps, images, videos)
• Comments and ratings you post
• Recipes you like (visible to the recipe creator)
• Your follower/following counts (for Chef accounts)

6.2 Private Information

The following information remains private and is not shared publicly:

• Email address
• Saved recipes (your personal cookbook)
• Meal plans and shopping lists
• Payment information
• Private messages and support tickets

6.3 Service Providers

We share data with third-party service providers (listed in Section 5) solely for the purpose of operating the Service. These providers are contractually obligated to protect your data and use it only as directed by us.

6.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Protect the rights or safety of our users or the public

6.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data in transit is encrypted using HTTPS/TLS. Passwords are hashed using secure algorithms.
• Access Controls: Strict access controls limit who can view or modify data.
• Secure Infrastructure: We use Supabase's secure cloud infrastructure with regular security updates.
• Payment Security: All payment processing is PCI DSS compliant through Stripe.
• Monitoring: We monitor for unauthorized access and security breaches.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: Most data is deleted within 30 days of account deletion, except as required for legal or business purposes
• Published Recipes: If you delete your account, your published recipes may remain visible but will be anonymized
• Legal Requirements: Some data may be retained longer to comply with legal obligations (e.g., payment records for tax purposes)
• Backups: Data may persist in backup systems for up to 90 days after deletion

9. Your Rights and Choices

9.1 Access and Correction

You can access and update most of your information through your account settings. You have the right to request a copy of your personal data.

9.2 Account Deletion

You may delete your account at any time through account settings. This will permanently remove your profile and private data. Published recipes may be retained in anonymized form.

9.3 Data Portability

You have the right to export your recipes, meal plans, and other data in a machine-readable format. Contact us to request a data export.

9.4 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email. You will still receive essential Service communications (e.g., security alerts, billing notices).

9.5 Cookie Preferences

You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication, security, and basic functionality
• Preference Cookies: Remember your settings and preferences (theme, language)
• Analytics Cookies: Track usage patterns to improve the Service
• Session Storage: Maintain your login session and temporary data

We do not use third-party advertising cookies or sell your data to advertisers.

11. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we discover we have collected data from a child under 13, we will promptly delete it.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

We use Supabase's cloud infrastructure which may store data in various global regions. All transfers comply with applicable data protection laws.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about the personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information (subject to certain exceptions)
• Right to Opt-Out: We do not sell your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at support@gathercook.com. We will verify your identity before processing requests.

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Obtain confirmation of data processing and access to your data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing

Our legal basis for processing your data includes:

• Contract Performance: Necessary to provide the Service you requested
• Consent: You have given explicit consent for specific processing
• Legitimate Interests: Necessary for our legitimate business interests (analytics, security, improvements)
• Legal Obligation: Required to comply with legal requirements

You also have the right to lodge a complaint with your local data protection authority.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the Service

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Gather Cook Corp.
Email: support@gathercook.com
Website: gathercook.com

For GDPR-related inquiries, you may also contact our Data Protection Officer at the above email address.