Privacy Policy

Data controller

The data controller for the data collected through ProCookBook is the operator of ProCookBook (identification details currently being updated). For any question or request concerning your data, write to us via the Contact page.

What data we collect

• Account data: name, email address, password (stored in encrypted form).
• Content you create: recipes, dishes, menus and the information you enter in them.
• Messages sent through the Contact form: name (optional), email, category and message text.
• Minimal technical data related to access (server logs), necessary for the operation and security of the service.
• Data of collaborators invited as staff by an account (Staff section): name, email and assigned role, used to manage shared access to the recipe book of the account that invites them.

Why we collect it

• Providing the service (creating and managing your recipe book, your account, your subscription): legal basis, performance of the contract with you.
• Replying to contact messages: legal basis, legitimate interest in handling requests and reports.
• Security and abuse prevention (e.g. detecting unusual access): legal basis, legitimate interest.
• Managing shared access to the recipe book (data of collaborators invited as staff — name, email, role): legal basis, the legitimate interest of the account holder in organising their own work team. Anyone invited as staff, even though they did not create the account, can also exercise the same rights described below by writing to us from Contact.

We do not use your data for advertising profiling and we do not sell it to third parties.

Where the data is stored and who processes it on our behalf

• Supabase — database and authentication.
• Vercel — application hosting.
• Resend — sending of service emails.

Each of these providers processes the data only to supply the requested technical service, under the respective data processing agreements (DPA).

How long we keep it

Your account data and the content you create are kept for as long as your account is active. If you request deletion of your account, the data is removed within a reasonable time, except for what we are required to retain under legal obligations (e.g. tax obligations).

Your rights

At any time you can ask us to:

• Give you access to the data we hold about you.
• Correct inaccurate data.
• Delete your account and the related data.
• Provide you with a copy of your data in a readable format (portability).
• Object to processing based on legitimate interest.

To exercise these rights, write to us via the Contact page. We reply within one month, as provided by EU Regulation 2016/679 (GDPR).

Security

We adopt reasonable technical measures (encrypted connections, encrypted passwords, restricted access) to protect your data from unauthorised access.

Changes to this policy

If we make a substantial change to how we process your data, we will update this page and show the new date at the top.