DRAFT for review. This text has not been reviewed by a lawyer. Items in [brackets] must be confirmed before launch.
Privacy
What we collect
- Account: your email address, used to sign you in with a one-time code.
- Your business data: supplier invoices you upload (images or PDFs), the lines we read from them, your menu items and recipes, your jobs and materials, and your customers' names, emails and unpaid invoices.
- Usage records: what was approved or sent (counts and dates, never the content of your documents), so you and we can see what happened.
How we use it
Only to run Margin Desk for you: read your invoices, track prices, compute margins, prepare suggestions and drafts, and send the reminders and weekly note you approve. We do not sell your data and we do not use it for advertising.
AI processing
To read an invoice we send the document to an AI provider (Anthropic) through its commercial API. See How we use AI. [Confirm and state the provider's current data retention and training terms.]
Who else handles data
Our hosting and database provider (Supabase), our web host [Vercel], our email provider (Resend) and, when billing opens, our payment provider (Stripe). [List final providers and their regions.]
Your customers' information
If you add your customers' names and emails (for payment reminders), you are responsible for having the right to contact them. We only email them when you approve a reminder.
Keeping and deleting data
Your data stays until you delete it or close your account. [State retention periods, backup behaviour and how to request export or deletion.]
Contact
[Contact email and business address.]