Privacy Policy
Effective [effective date]
Draft — pending legal review. Not yet binding.
What we collect
Your email address and password (stored hashed by our authentication provider) — or, if you choose Continue with Google, the name, email address and profile picture Google shares with us (we never see your Google password) — your organization's name, and what you create in Banana: saved cocktails, experiments, notes and photos you upload. For billing we keep your subscription status, plan, currency and renewal date — never your card details.
Who processes it
- Supabase — database, authentication and file storage.
- Google — optional sign-in with your Google account.
- Stripe — payments and the billing portal; your card details go directly to Stripe.
- Vercel — hosting, plus privacy-friendly, cookieless page analytics.
- OpenAI, via Vercel AI Gateway — the problems you type into Ingredient Intelligence are sent to generate strategies.
Photos
Photos you upload to My Lab are stored at a long, unguessable web address so they can be displayed; anyone who has that exact address could open the image. Don't upload anything you need kept strictly private.
Cookies
We use only the cookies needed to keep you signed in (and, before launch, one that remembers preview access). No advertising cookies.
How we use it
To run your account and lab, process your subscription, answer your requests, and improve Banana. We don't sell your data.
Your rights
You can ask to access, correct, export or delete your data at [contact email]. Deleting your account removes your lab content; billing records are kept as the law requires.
Contact
[Legal entity name] · [contact email]