Privacy policy

Allergen Signoff ("we") helps restaurants keep an allergen matrix for their dishes and a record of who signed each one off. This page explains what we store and why. We don't sell your data and we don't show ads.

What we store

• Your account: your email address and a securely hashed password, handled by Amazon Cognito.
• Your company's records: company name, locations, ingredients with their suppliers and allergens, dishes and sub-recipes, sign-offs with their notes, and who on your team did what. Spec sheets are stored only as links you paste in. We don't store guest names, guest allergies, or anything else about your guests.
• Page-view analytics: the page you visited, the referring site, your browser's user agent, rough location when available, and a one-way hash of your IP address that changes daily. We never store your raw IP address.
• Feedback you send us, with your email if you give it.
• Billing: payments are processed by Stripe. We store your Stripe customer and subscription IDs and your plan, never your card number.

Cookies

We use only first-party cookies: one to keep you signed in, and two random IDs that count visits and sessions. No third-party tracking or advertising cookies.

Who processes your data

Amazon Web Services (hosting, database, sign-in), Stripe (payments) and Resend (email). Each processes data only to provide its service to us.

How long we keep it

Your company's records stay until you delete them or ask us to close the account. Analytics are kept in aggregate form for as long as they're useful.

Your choices

Owners, managers and chefs can print the allergen matrix at any time, and on paid plans export the matrix, the ingredient list and the sign-off history to CSV. To get a copy of everything, correct something, or delete your account and company data, contact us and we'll handle it within 30 days.

Contact

Questions about privacy: use the feedback form.